Jul 4, 2025
0 new incidents, 1 with updates.
Updated
- ClosedPatched
CitrixBleed 2: NetScaler memory leak exploited to hijack sessions
An out-of-bounds read in NetScaler ADC and Gateway leaked memory, including session tokens, to unauthenticated attackers. GreyNoise saw exploitation from June 23, before public PoCs on July 4. After patching, admins had to kill all active ICA, PCoIP, RDP, AAA and LB sessions.
Citrix NetScaler ADC and GatewayClosed Jul 10, 2025