CVE-2025-5777
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.
CISA Known Exploited Vulnerability
Vendor / Product
Citrix — NetScaler ADC and Gateway
Date Added
2025-07-10
Remediation Due
2025-07-11
Ransomware Use
CONFIRMED
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5777
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| citrix | netscaler_application_delivery_controller | 12.1 – 12.1-55.328 |
| citrix | netscaler_application_delivery_controller | 13.1 – 13.1-37.235 |
| citrix | netscaler_application_delivery_controller | 13.1 – 13.1-37.235 |
| citrix | netscaler_application_delivery_controller | 13.1 – 13.1-58.32 |
| citrix | netscaler_application_delivery_controller | 14.1 – 14.1-43.56 |
| citrix | netscaler_gateway | 13.1 – 13.1-58.32 |
| citrix | netscaler_gateway | 14.1 – 14.1-43.56 |
References & Advisories (10)
Vendor Advisory
US Government Resource
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Press/Media Coverage
Third Party Advisory
Press/Media Coverage
Broken Link
Third Party Advisory