Actively exploited in the wild
Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Citrix - Session Recording · Listed in the CISA KEV since 2025-08-25. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2024-8069
HighCVSS 8.0KEVSummary
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server.
Risk Assessment
An authenticated attacker on the same intranet can execute limited code with NetworkService account privileges, potentially leading to unauthorized actions on the session recording server.
Recommendation
Apply Citrix updates for Session Recording and restrict network access to the session recording server to trusted users and network segments only.
Other vulnerabilities in Citrix Session Recording
Original NVD description (English source)
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server