Actively exploited vulnerabilities affecting Citrix products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-3055https://wildfortech.com/security#CVE-2026-3055This vulnerability affects Citrix NetScaler ADC, NetScaler Gateway, and their FIPS/NDcPP variants when configured as a SAML Identity Provider. An out-of-bounds read flaw allows an attacker to force the device to read beyond intended memory boundaries, potentially exposing sensitive data from memory. Because NetScaler devices typically sit at network edges handling authentication traffic, exploitation could compromise credentials or session data for a broad user population.Mon, 30 Mar 2026 00:00:00 GMTCitrixNetScalerhttps://wildfortech.com/security#CVE-2025-7775https://wildfortech.com/security#CVE-2025-7775Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that remote attackers could exploit to execute arbitrary code or crash affected systems. These are widely deployed network appliances controlling application delivery and VPN access, meaning a successful attack could give adversaries deep access to internal networks or knock out critical connectivity. CISA has added this to the Known Exploited Vulnerabilities catalog, signaling confirmed real-world exploitation.Tue, 26 Aug 2025 00:00:00 GMTCitrixNetScalerhttps://wildfortech.com/security#CVE-2024-8068https://wildfortech.com/security#CVE-2024-8068This vulnerability in Citrix Session Recording allows an authenticated attacker — already a member of the same Active Directory domain as the session recording server — to escalate their privileges to the NetworkService Account level. While the attacker must already have domain credentials, gaining NetworkService access can open pathways to broader system compromise, making this a meaningful risk in enterprise environments where Citrix Session Recording is deployed.Mon, 25 Aug 2025 00:00:00 GMTCitrixSession Recordinghttps://wildfortech.com/security#CVE-2024-8069https://wildfortech.com/security#CVE-2024-8069Citrix Session Recording is vulnerable to deserialization of untrusted data, allowing an authenticated attacker on the same internal network to execute remote code with NetworkService Account privileges. While the attacker must already have internal network access and valid credentials — limiting the attack surface — successful exploitation could give an adversary a persistent foothold with system-level service privileges, enabling lateral movement or further compromise of recorded session data.Mon, 25 Aug 2025 00:00:00 GMTCitrixSession Recordinghttps://wildfortech.com/security#CVE-2025-5777https://wildfortech.com/security#CVE-2025-5777Citrix NetScaler ADC and Gateway contain a flaw where insufficient input validation allows an attacker to read memory beyond intended boundaries. This affects appliances configured as VPN virtual servers, ICA Proxy, CVPN, RDP Proxy, or AAA virtual servers — common enterprise remote-access configurations. The vulnerability is actively being exploited by ransomware operators, meaning real-world attacks are already underway against organizations using these widely deployed network gateway products.Thu, 10 Jul 2025 00:00:00 GMTCitrixNetScaler ADC and Gatewayhttps://wildfortech.com/security#CVE-2025-6543https://wildfortech.com/security#CVE-2025-6543This buffer overflow flaw in Citrix NetScaler ADC and Gateway allows attackers to disrupt control flow and cause a Denial of Service, effectively taking the affected device offline. It only applies when NetScaler is configured in specific roles — as a VPN virtual server, ICA Proxy, CVPN, RDP Proxy, or AAA virtual server. For organizations relying on these devices for remote access or authentication, an outage could cut off employees or customers from critical resources.Mon, 30 Jun 2025 00:00:00 GMTCitrixNetScaler ADC and Gateway