⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2023-4966

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

CitrixBleed: Leaks NetScaler session tokens without authentication, bypassing MFA entirely. Patch immediately and invalidate all active sessions after patching. Exploited by LockBit and other ransomware affiliates at scale.

📋 Official Description

Citrix NetScaler ADC and NetScaler Gateway buffer overflow allows unauthenticated information disclosure. CitrixBleed vulnerability leaking session tokens from memory.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →