CVE-2023-4966
Unauthenticated sensitive information disclosure
- Published
- Oct 10, 2023
- Updated
- Jul 31, 2026
- Assigning CNA
- Citrix
- Evidence observed
- Oct 18, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Sources
modules/auxiliary/scanner/http/citrix_bleed_cve_2023_4966.rb
Metasploit Framework modulesDeclared conditions
- verification: check_not_declared($.auxiliary_scanner/http/citrix_bleed_cve_2023_4966.check)
http/cves/2023/CVE-2023-4966.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: word($.matchers[*].type)
- CVE-2023-4966Exploit
CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit
- citrix_cve-2023-4966Scanner
Parallelized exploit scanner for Citrix CVE-2023-4966 with file-based target handling, enabling rapid vulnerability verification across multiple hosts.
- CVE-2023-4966-POCExploit
Proof Of Concept for te NetScaler Vuln
- CVE-2023-4966Exploit
An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability
- CVE-2023-4966Exploit
Programm to exploit a range of ip adresses
Proof-of-concept exploit for CVE-2023-4966, a critical vulnerability in Citrix ADC and Gateway. Enables security researchers to test and validate exposure in affected environments.
Proof-of-concept exploit for CVE-2023-4966, demonstrating the vulnerability and providing a basis for security testing and validation.
- overreadPoC
Simulates CVE-2023-4966 Citrix Bleed overread bug
- CVE-2023-4966-exploitExploit
CVE-2023-4966-exploit
- cve-2025-5777Exploit
Memory disclosure vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway (VPN virtual server, ICA proxy, CVPN, RDP Proxy).
- CVE-2025-5777Exploit
Python exploit for CVE-2025-5777 (CitrixBleed 2) memory leak in Citrix NetScaler. Sends malformed POST requests to leak ~127 bytes of RAM per request, extracting session tokens, credentials, and other sensitive data from uninitialized memory.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.