Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack

A critical unauthenticated out-of-bounds read vulnerability (CVE-2025-5777, CVSS 9.3) affects Citrix NetScaler ADC and NetScaler Gateway builds and can expose session tokens, enabling impersonation and MFA bypass; while no active exploitation has been reported yet, analysts warn it closely resembles the prior CitrixBleed flaw that was widely exploited by ransomware gangs, and organizations are strongly advised to apply vendor patches and recommended remediation steps immediately.