Known Exploited Vulnerabilities August 25, 2025 · CISA KEV Catalog

CVE-2024-8069: Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-8069 Citrix
Related: CVE-2026-88779: Citrix Net Scaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Known Exploited Vulnerabilities · Oct 04, 2026
CVE-2026-88771: Citrix Net Scaler Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Sep 27, 2026
CVE-2026-88772: Citrix Net Scaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Known Exploited Vulnerabilities · Sep 27, 2026