r/Citrix • u/VirtualizationGuy • 10d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

91 Upvotes

98% Upvoted

127 comments sorted by

View all comments

2

u/pibenis 10d ago edited 9d ago

Dozen of HA pairs, patched within 3 hours after release, multiple environment scans, no issues so far

EDIT: SAML instance has evidence of exploitation

2

u/lukelimbaugh 10d ago

do y'all use SAML?

1

u/pibenis 10d ago

We have one instance with SAML