Hello and welcome to the Thursday, June 26, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Ulrich, and this episode brought you by the Sands.edu graduate certificate program in cybersecurity engineering is recorded in Stockholm, Germany.

And yes, we do have an other vulnerability from Citrix, Citrix NetScaler.

I just talked about a warnability that allowed session credentials to leak a couple days ago.

This one is just a denial of service warner still a critical CFSS score, and this

vulnerability apparently is already being exploited. Just like

the Session League vulnerability, this particular vulnerability affects any

net scaler that is configured as a gateway.

So a VPN virtual server and ICA proxy, CvPN, RDP proxy,

which is a very common configuration for these types of devices.

So definitely pay attention to this.

Also, end-of-life versions of NetSkila are vulnerable,

but of course there's no patch necessarily available for them. Paches have been made available now

for the currently supported versions, and you should definitely be applying them quickly,

given that this vulnerability may already be exploited.

And companies that offer servers for rent often use a software package called WebPanel

in order to manage SendOS servers. This package has two parts. One is the admin part, that only administrator is supposed to log into and, of course, gains

administrator privileges to the server.

And then there is a user panel that the user can use to essentially manage their own website

on that particular server.

And the intent is that you have multiple users share the server and WebPenel is supposed to

keep those users apart, which of course is always a little bit tricky.

...