Dans la première partie de cette série d'articles, nous avons démontré notre théorie initiale selon laquelle le correctif de la CVE-2025-33073 était insuffisant, en exposant une vulnérabilité triviale de réflexion NTLM menant à une LPE.
Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part ②
About this summary. This is a short, independently written summary of an article first published by Synacktiv. Cyber Security News did not report or verify the underlying story. Read the original: https://www.synacktiv.com/publications/bypassing-windows-authentication-reflection-mitigations-for-system-shells-part.html
Source attribution: headline and facts are from Synacktiv (synacktiv.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part 1
Il y a un an, les vulnérabilités de réflexion d'authentification ont refait surface comme un vecteur d'attaque puissant, à travers la découverte de la CVE-2025-33073 par…
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway…
Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel |…
Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
There are reportedly two unpatched zero-day Citrix NetScaler vulnerabilities capable of enabling remote code execution that have been actively exploited in the wild…
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the…