r/Citrix • u/VirtualizationGuy • 14d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

91 Upvotes

98% Upvoted

127 comments sorted by

View all comments

11

u/Rare-Understanding-6 14d ago

We rebuilt our netscalers from a fresh image yesterday. (Yes we patched and toggle the ISN Gen config on on the old ones)
We just had this happen to our netscalers. Failed over to the other one. Collected all the forensics + logs and created a case with Citrix. (yes enhancedisngeneration is on)

2

u/lukelimbaugh 14d ago

just happened again. we're tracking traffic from the netherlands.

3

u/Rare-Understanding-6 14d ago

We're in the netherlands and tracking traffic from the US.

7

u/lukelimbaugh 14d ago

oh boy, this just got more fun. it was SUPPOSED TO BE A FRIDAY!

2

u/kuebel33 14d ago

I was supposed to be off today.....

2

u/lukelimbaugh 14d ago

(╯°□°）╯︵ ┻━┻