Citrix 'Recording Manager' Zero-Day Bug Allows Unauthenticated RCE

watchTowr researchers disclosed a zero-day in Citrix Session Recording Manager that leverages insecure .NET BinaryFormatter deserialization combined with an exposed MSMQ service and misconfigured permissions to enable unauthenticated remote code execution; the flaw risks data theft and lateral movement from systems that record user activity. Citrix has since issued patches and assigned CVEs, and there were no confirmed in-the-wild exploits reported at the time of publication.