CVE-2025-5777: Critical Information Disclosure Vulnerability “Citrix Bleed 2” in Citrix NetScaler ADC and Gateway

**Arctic Wolf advisory (23 June 2025):** Multiple critical Citrix NetScaler vulnerabilities (CVE-2025-5777, CVE-2025-5349, CVE-2025-6543) were disclosed with recommended immediate upgrades to fixed versions and session termination commands; Citrix confirmed in-the-wild exploitation of CVE-2025-6543 while CVE-2025-5777 has not yet been observed in the wild but is likely to attract attention due to similarity with a previously exploited Citrix flaw.