From Wikipedia
NCSC-NL cautions that patches alone cannot remove implanted web shells on NetScaler devices, requiring organizations to pursue comprehensive remediation.