CISA mandates federal patching of actively exploited Citrix NetScaler RCE vulnerability

CISA has issued an emergency directive requiring U.S. federal agencies to remediate a critical remote code execution vulnerability in Citrix NetScaler appliances by August 29, 2026. The directive follows evidence of active exploitation, though the specific threat actors and scale of compromise remain unconfirmed.