CVE-2024-8068(citrix / session_recording)

LOWCVSS 8.0 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

citrix CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-09-15. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Vendor / third-party advisories

https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US

Other references

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8068

Weakness type (CWE)

CWE-269

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

session_recording

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

citrix

Products

session_recording

4 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://aviatrix.ai/threat-research-center/netscaler-zero-days-cve-2026-88771-cve-2026-88772-exploited

Full discourse1 post

Aviatrix Threat Research Center@aviatrixtrc1d
Attackers exploited NetScaler zero-days CVE-2024-8068 & CVE-2024-8069 to compromise 50,000+ exposed systems globally. These ADC and Gateway devices became pivot points for lateral movement into internal networks. Runtime segmentation helps contain post-compromise activity from trusted infrastructure. #ZeroDay #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/netscaler-zero-days-cve-2026-88771-cve-2026-88772-exploited
0000055
2.0K followersView on X

CPE platform detail18 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

18 of 18 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	citrix	session_recording	-	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	1912	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2203	-	-
App	citrix	session_recording	2402	-	-
App	citrix	session_recording	2407	-	-

Explore more

Back to dashboard citrix CVEs session_recording vulnerabilities