
- CitrixBleed 2 was discovered in late June 2025
- The majority of instances have not yet been patched
- Security researchers are warning the bug is likely being exploited already
CitrixBleed 2, a vulnerability in Citrix NetScaler ADC and NetScaler Gateway, is now being actively exploited in the wild, multiple researchers have warned.