Exploited Vulnerabilities DailyCVE-2024-8069: Citrix Session Recording
EPSS14.6%No. 1198 of 1739 in KEV
CVE year2024~1 yrs before listing
Same vendor in KEV27
Same product2
| Field | Value |
|---|---|
| Vendor | Citrix |
| Product | Session Recording |
| Name | Citrix Session Recording Deserialization of Untrusted Data Vulnerability |
| Added to KEV | 2025-08-25 |
| US federal due date | 2025-09-15 |
| Ransomware use | Unknown |
| CWE | CWE-502 |
CISA description
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Citrix Session Recording vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-08-25.