Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?
To respect copyright, we link to the source rather than republishing the full text. Read the complete article on The Register.