NetScaler

CitrixBleed CVE-2023-4966: Session Tokens Straight From Memory

Post author:Hmmnm
Post published:October 10, 2023
Post category:Cloud & Infrastructure Security Web & API Security

CVE-2023-4966 let attackers read valid session tokens out of NetScaler memory and inherit authenticated sessions wholesale — MFA already passed. CISA's Emergency Directive 23-08 forced hunts and rebuilds as LockBit monetized the access.

Citrix NetScaler CVE-2023-3519: Breached Before the Advisory

Post author:Hmmnm
Post published:July 18, 2023
Post category:Cloud & Infrastructure Security Web & API Security

The July 2023 NetScaler ADC/Gateway pre-auth RCE hit government networks as a true zero-day — and post-patch webshell persistence taught defenders that appliance remediation means rebuild, not upgrade.