CitrixBleed
Security incidents tagged CitrixBleed. Newest first.
0 CitrixBleed incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 492
- Longest quiet run: 469 days (Jul 11–Oct 22)
Show 1 older incident1 older incident
June 2025 1
- CriticalPatched
CitrixBleed 2: NetScaler memory leak exploited to hijack sessions
An out-of-bounds read in NetScaler ADC and Gateway leaked memory, including session tokens, to unauthenticated attackers. GreyNoise saw exploitation from June 23, before public PoCs on July 4. After patching, admins had to kill all active ICA, PCoIP, RDP, AAA and LB sessions.
Citrix NetScaler ADC and GatewayClosed Jul 10, 2025
