@GossiTheDog @esandell they won't even give me that much with an NDA. NCSC-NL has done more for Citrix customers than Citrix.
Since we couldn't patch immediately due to "reasons" I went the route of voiding the warranty and automated the webshell checks to at least have an ounce of visibility on these shitty black box appliances.
https://github.com/brf2010/citrix-webshell-alert
It's not even complicated. It's just short shell scripts. I'm just some fucking guy. If Citrix can't even do this much and send some shit over syslog then what fucking good are they