Citrix patches are out on the main support site now.
You will need to check every box after patching for webshells. Citrix are locking the script behind an NDA as apparently they’re from 1996… hopefully one of the NCSCs publishes a script again as the NDA thing is crap.
Kevin Beaumont
npub1lc…6lcye
2026-09-27 15:56:54 UTC
in reply to nevent1q…27ek
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-09-27 15:56:54 UTCEvent JSON
{
"id": "0525783e887bc5c1e7859813a70739fb4b804f4dadd2687466dea001be6ca0f5",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1790524614,
"kind": 1,
"tags": [
[
"imeta",
"url https://cyberplace.social/system/media_attachments/files/117/343/820/885/861/700/original/eb927eb6864ceb2e.mp4",
"m video/mp4"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"23f22e25375736fdb37fe805511e7be087d26e5f2f9d2320672616893bad2bf1",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117343821114841048",
"web"
],
[
"e",
"292de5a446fd4e839cf2c2c1b3a7ca4a921c148cb50dd57c056be72f386391bd",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117343821114841048",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117343821114841048",
"pink.momostr"
],
[
"-"
]
],
"content": "Citrix patches are out on the main support site now. \n\nYou will need to check every box after patching for webshells. Citrix are locking the script behind an NDA as apparently they’re from 1996… hopefully one of the NCSCs publishes a script again as the NDA thing is crap.\nhttps://cyberplace.social/system/media_attachments/files/117/343/820/885/861/700/original/eb927eb6864ceb2e.mp4\n",
"sig": "35e318f291f86807951a2a3291f7019fb2b719aa3fbf3ffb77b62bc18847de9f9b2f603d045dd82cffede04e959d6291d9c346bdc862f92d687c7b58bfee6379"
}