Multiple Vulnerabilities in Citrix Products Could Allow For Disclosure Of Sensitive Data

Multiple vulnerabilities were discovered in Citrix NetScaler ADC and NetScaler Gateway, including a critical unauthenticated out-of-bounds read (CVE-2025-5777) that can cause memory overreads and disclosure of sensitive information such as authenticated session tokens, and a lower-severity improper access control issue (CVE-2025-5349) affecting management interfaces; successful exploitation could enable attackers to gain further access to appliances or connected systems.