ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Sep 3, 2025 · ZeroDay Catalog

    Critical Deserialization Vulnerability Found in Sitecore Products

    A serious deserialization vulnerability has been identified in multiple Sitecore products, potentially allowing remote code execution through exposed machine keys.

    What changed

    A significant vulnerability has been discovered in Sitecore's suite of products, specifically related to the deserialization of untrusted data. This flaw arises from the use of default ASP.NET machine keys, which can be exploited by attackers to execute arbitrary code remotely.

    Who is affected

    Organizations utilizing Sitecore's products are at risk due to this vulnerability. The affected products include:

    • Sitecore Experience Manager (XM)
    • Sitecore Experience Platform (XP)
    • Sitecore Experience Commerce (XC)
    • Sitecore Managed Cloud

    What to do

    It is crucial for security operators to assess their Sitecore implementations and take immediate action to mitigate this vulnerability. Recommendations include reviewing machine key configurations and applying necessary updates.

    • Change default machine keys to custom values.
    • Monitor for any unusual activity that may indicate exploitation attempts.
    • Stay informed on updates from Sitecore regarding patches or further guidance.

    Original report

  2. Research · Aug 26, 2025 · ZeroDay Catalog

    Critical Memory Overflow Vulnerability in Citrix NetScaler

    A memory overflow vulnerability in Citrix NetScaler could lead to remote code execution or denial of service, impacting various configurations.

    What changed

    A newly identified memory overflow vulnerability in Citrix NetScaler has been reported, which may allow attackers to execute arbitrary code or cause a denial of service. This vulnerability is particularly critical when NetScaler is configured for specific roles such as Gateway or AAA virtual servers.

    • The vulnerability affects NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, and 13.1-FIPS.
    • It is triggered when the NetScaler is configured with IPv6 services or service groups.
    • The risk is heightened when using load balancing virtual servers of types HTTP, SSL, or HTTP_QUIC.

    Who is affected

    Organizations utilizing Citrix NetScaler products for their networking and application delivery may be at risk. The following groups should pay particular attention to this vulnerability.

    • Enterprises using Citrix NetScaler ADC for application delivery.
    • Organizations employing NetScaler Gateway for secure remote access.
    • Users of load balancing configurations that involve IPv6 services.
    • FIPS-compliant environments relying on NetScaler 13.1-FIPS.

    What to do

    It is crucial for affected organizations to assess their configurations and apply necessary mitigations. Immediate action is recommended to prevent exploitation.

    • Review and update to the latest version of Citrix NetScaler to mitigate the vulnerability.
    • Reconfigure any NetScaler instances that utilize IPv6 services to reduce exposure.
    • Monitor network traffic for unusual activities that may indicate exploitation attempts.
    • Consult Citrix security advisories for detailed guidance on remediation.

    Original report