H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-08-25
Last seen2025-08-25

Confidence

—

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

Labels

exploitedkev

CISA KEV context

Vendor / productCitrix Session Recording
Added2025-08-25
Due date2025-09-15
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2024-8069
open
cwe
CWE-502
open