Exploited Vulnerabilities DailyCVE-2024-8068: Citrix Session Recording
EPSS3.4%No. 1488 of 1739 in KEV
CVE year2024~1 yrs before listing
Same vendor in KEV27
Same product2
| Field | Value |
|---|---|
| Vendor | Citrix |
| Product | Session Recording |
| Name | Citrix Session Recording Improper Privilege Management Vulnerability |
| Added to KEV | 2025-08-25 |
| US federal due date | 2025-09-15 |
| Ransomware use | Unknown |
| CWE | CWE-269 |
CISA description
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Citrix Session Recording vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-08-25.