Warning of attacks on Zammad and Citrix NetScaler

CISA warns that attackers are exploiting new flaws in Citrix NetScaler and the Zammad helpdesk software. In NetScaler, a buffer overflow in SAML sign-in handling lets floods of requests knock systems offline; in Zammad, two flaws combine to let attackers hijack sessions, run code with the system account's rights and gain root access. Updates are available, but a fix for the Zammad root issue is still pending.

Summary written with AI by HowTechMoves, based on reporting by heise online.