CVE-2023-4966

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 20, 2025

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group86.0

A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control...

Critical Zero-Day Vulnerabilities in Citrix NetScaler Under Active Exploitation80.8

On September 26, 2026, security firm watchTowr reported two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and Gateway appliances, allowing remote code execution (RCE) and actively exploited in the wild. Citrix has confirmed the existence of these vulnerabilities, tracked as CVE-2026-887...

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited80.0

In late September 2026, two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and Gateway were actively exploited, allowing remote code execution. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabi...

Critical CitrixBleed-2 Vulnerability (CVE-2025-5777)72.9

CVE-2025-5777, known as CitrixBleed-2, is a critical unauthenticated out-of-bounds read vulnerability in Citrix NetScaler ADC and Gateway products. Disclosed on June 17, 2025, it allows attackers to leak sensitive memory data, including session tokens, via a single crafted HTTP request. Affected ver...