WatchTowr has reported two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that are being actively exploited for remote code execution. Citrix has not yet confirmed the flaws or released a fix, leading some administrators to take their appliances offline as a precautionary measure. These critical vulnerabilities pose a significant risk to organizations using affected Citrix products, highlighting the urgency for a patch or mitigation guidance.