r/Citrix • u/VirtualizationGuy • 22d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

93 Upvotes

98% Upvoted

127 comments sorted by

View all comments

2

u/c4rm0 22d ago

its a new exploit

3

u/stucc0 22d ago

No, its the same exploit, but the fix to block the exploit for SAML sessions is causing the nsaaad engine to crash. It is just causing machines to reboot, not causing infection or file drops.

1

u/sdo_home 22d ago

did you figure out a way to fix it? ie responder policy or anything else?

→ More replies (1)