Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*

2 briefs RSS
high threat

CitrixBleed 2 (CVE-2025-5777) Exploitation Leading to Dragonforce Ransomware

Initial Access Brokers are actively exploiting CitrixBleed 2 (CVE-2025-5777) on NetScaler appliances to steal session tokens, achieve local privilege escalation, establish persistence via legitimate remote access tools, and ultimately deploy Dragonforce ransomware.

exploited NetScaler ransomware initial-access privilege-escalation persistence citrix dragonforce
4r 9t 1c 7i
critical threat

Citrix ADC CVE-2023-3519 Exploitation Attempts

Exploitation attempts against Citrix ADC via CVE-2023-3519, a SAML processing overflow, detected through specific POST requests, could lead to arbitrary code execution, privilege escalation, or service disruption.

ADC +1 citrix cve-2023-3519 saml exploitation
2r 1t 1c updated