Bleed Two

Vulnerability

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 13, 2025

Last Seen

November 13, 2025

API

Bleed Two refers to a set of zero-day vulnerabilities affecting Cisco and Citrix products, reportedly being exploited by an APT group, with Amazon confirming their existence.

Overview

Recent Events

Related Clusters (2)

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

Nov 15·100 sources

APT Exploits Zero-Day Vulnerabilities in Cisco and Citrix Systems

Nov 18·16 sources

Related Entities

Zero-day Exploit Citrix T1505.003 - Web Shell Cisco ISE Tomcat Custom Web Shell

Bleed Two

Overview

Recent Events

Profile

Tools Used

MITRE Techniques

Affected Platforms

Related Clusters (2)

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

APT Exploits Zero-Day Vulnerabilities in Cisco and Citrix Systems

Related Articles (1)

Zero-Day Vulnerabilities in Cisco and Citrix Targeted by APT Group, Amazon Confirms

Related Entities