Citrix Session Recording Deserialization of Untrusted Data Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/08/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| session recording | = 1912= 2203= 2402= 2407< 2407 | 2407 |
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free