<ul data-eligibleForWebStory="false">CISA has warned about active exploitation of CitrixBleed 2, a critical vulnerability affecting Citrix NetScaler devices.CitrixBleed 2, rated at a severity level of 9.3/10, can lead to memory overread and extraction of sensitive data from vulnerable devices.The bug was discovered in mid-June 2025 with reports of in-the-wild abuse by early July. CISA urges immediate patching to mitigate risks.Federal agencies and other businesses are advised to act swiftly on patching vulnerable endpoints to prevent potential exploitation.