Loading feed…
Updated
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service. Known-exploited catalogue reports exploitation in the wild.
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. Known-exploited catalogue reports exploitation in the wild.
(formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP… known-exploited catalogue reports…
Next step: Confirm whether Citrix NetScaler is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Citrix Session Recording contains a deserialisation of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access.
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
End of feed