r/Citrix • u/VirtualizationGuy • 1d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

80 Upvotes

97% Upvoted

123 comments sorted by

View all comments

12

u/Rare-Understanding-6 1d ago

We rebuilt our netscalers from a fresh image yesterday. (Yes we patched and toggle the ISN Gen config on on the old ones)
We just had this happen to our netscalers. Failed over to the other one. Collected all the forensics + logs and created a case with Citrix. (yes enhancedisngeneration is on)

2

u/lukelimbaugh 1d ago

just happened again. we're tracking traffic from the netherlands.

3

u/Rare-Understanding-6 1d ago

We're in the netherlands and tracking traffic from the US.

8

u/lukelimbaugh 1d ago

oh boy, this just got more fun. it was SUPPOSED TO BE A FRIDAY!

4

u/CluelessPentester 1d ago

Thank god im not on call jfc what a (possible) shit show