SophiaX
🔍
LIVE
· New victim: Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... — blacknevas· New victim: Riker Danzig Scherer Hyland & Perretti — SilentRansomGroup· New victim: Hightech Signs — kairos· New victim: Riker Danzig LLP — SilentRansomGroup· New victim: gamaus.com — incransom· New KEV: CVE-2026-72898 · Metabase· New KEV: CVE-2026-20349 · Cisco· New KEV: CVE-2026-68820 · Microsoft· New KEV: CVE-2026-8037 · Progress· New KEV: CVE-2026-63077 · JetBrains· New victim: 3,981 new IOCs ingested in last 24h Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... — blacknevas· New victim: Riker Danzig Scherer Hyland & Perretti — SilentRansomGroup· New victim: Hightech Signs — kairos· New victim: Riker Danzig LLP — SilentRansomGroup· New victim: gamaus.com — incransom· New KEV: CVE-2026-72898 · Metabase· New KEV: CVE-2026-20349 · Cisco· New KEV: CVE-2026-68820 · Microsoft· New KEV: CVE-2026-8037 · Progress· New KEV: CVE-2026-63077 · JetBrains· 3,981 new IOCs ingested in last 24h
← Vulnerabilities

CVE-2023-4966

⚡ CISA KEV🔐 Ransomware
Published: 2023-10-10Modified: 2026-07-31Vendor: CitrixProduct: NetScaler ADC and NetScaler Gateway
9.4
CVSS v3
100.0%
EPSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
⚡ Added to KEV on 2023-10-18 · Federal agencies must remediate by 2023-11-08
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.
CWE:CWE-119
💣 Public Exploits0
From Exploit-DB
No public exploits in Exploit-DB.
🔍 Sigma Detection Rules4
Rules tagged with this CVE
highCVE-2023-4966 Exploitation Attempt - Citrix ADC Sensitive Information Disclosure - Proxy——
highCVE-2023-4966 Exploitation Attempt - Citrix ADC Sensitive Information Disclosure - Webserver——
mediumCVE-2023-4966 Potential Exploitation Attempt - Citrix ADC Sensitive Information Disclosure - Proxy——
mediumCVE-2023-4966 Potential Exploitation Attempt - Citrix ADC Sensitive Information Disclosure - Webserver——
🛠️ Patch Details1
Affected/fixed versions from threat intel reports
Citrix NetScalersource ↗
📰 Threat Intel Coverage3
Digest reports mentioning this CVE
CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntresshuntress2026-07-09
Ransomware Tactics, Techniques, and Procedures in a Shifting Threat Landscape | Google Cloud Blogmandiant2026-03-16
“Citrix Bleed 2” – Critical Info Disclosure Vulnerability Exploited in NetScaler Gateway and ADC (CVE-2025-5777)hawkeye2025-07-22
📎 References5
↗ http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html↗ https://support.citrix.com/article/CTX579459↗ http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html↗ https://support.citrix.com/article/CTX579459↗ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966
View on NVD ↗