Citrix released security updates to address multiple vulnerabilities in NetScaler application delivery controller (ADC), NetScaler Gateway, and Citrix Session Recording. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  

 Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following and apply necessary updates: 

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-8534 and CVE-2024-8535

• Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069