CVE-2023-25608

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

CVSS 5.2 medium · Fortinet FortiAP-W2 · published 2023-09-13

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.

NVD · CVE.org

Coverage 1 source

1. 2026-09-28 Cybersecurity Dive critical Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

   Citrix urges immediate upgrades of NetScaler due to widespread exploitation attempts of critical zero-day flaws.

Mentioned with

CVE-2023-6548

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88778 TCP Initial Sequence Number (ISN) prediction CVSS 8.8 · 1 article · 2026-09-27