Citrix Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Citrix Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and remote code execution on the targeted system.

Note:

CVE-2024-8068 and CVE-2024-8069 are being exploited in the wild. For CVE-2024-8068, Citrix Session Recording contains an improper privilege management vulnerability that could allow attacker for privilege escalation to NetworkService Account access. For CVE-2024-8069, it contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker needs to be authenticated before exploiting these vulunbilities. Hence, the overall risk is rated as High Risk. 

[Updated on 2025-08-26]

Updated Risk Level, Description and Related Links.