CVE-2024-8069
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
4/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
CISA Known Exploited Vulnerability
Vendor / Product
Citrix — Session Recording
Date Added
2025-08-25
Remediation Due
2025-09-15
https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8069