Oct 17, 2023
0 new incidents, 1 with updates.
Updated
- ClosedPatched
Citrix Bleed: NetScaler session token leak (CVE-2023-4966)
A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users).
Citrix NetScaler ADC and NetScaler GatewayClosed Nov 21, 2023