CVE-2024-8069CISA KEVEPSS p96.2%

CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix / Session Recording

Description

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

Scoring

EPSS14.74% probability of exploitation · percentile 96.2% · 2026-06-19T12:03:05Z

CISA KEV entry

Added to KEV: 2025-08-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryCitrix Session Recording Deserialization of Untrusted Data Vulnerabilitykev-cve-2024-80690%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Citrix Session Recording Improper Privilege Management Vulnerability
CVE
Netwrix Auditor Insecure Object Deserialization Vulnerability
CVE
Microsoft SharePoint Deserialization Vulnerability
CVE
CVE-2026-40368
CVE
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
CVE
CVE-2025-24035
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.