Skip to content
feed: live about
>_ 0dayNews
Vendor

Citrix

Citrix NetScaler ADC and Gateway vulnerabilities, including session-hijacking flaws like Citrix Bleed that bypass MFA entirely.

CVEs
CVE-2023-4966
[ CRITICAL ] CVSS 9.4 kev

Citrix Bleed — NetScaler ADC and Gateway Sensitive Information Disclosure

A buffer-overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway allows attackers to harvest valid session tokens from device memory, hijacking authenticated sessions and bypassing MFA entirely. Widely known as "Citrix Bleed."

Citrix / NetScaler ADC and NetScaler Gateway
Articles
~/articles/2026-06-25-citrix-bleed-netscaler-session-hijacking-explained
Citrix Bleed: How a Memory Leak in NetScaler Bypassed MFA Entirely
Explainer
citrix

Citrix Bleed: How a Memory Leak in NetScaler Bypassed MFA Entirely

CVE-2023-4966, known as Citrix Bleed, let attackers pull live session tokens straight out of NetScaler ADC and Gateway memory — hijacking already-authenticated sessions without needing a password or MFA code.

read →