Warning: Critical vulnerability (CVE-2025-5777) impacts NetScaler ADC & Gateway, leading to unauthenticated memory overread, Patch Immediately!
ID: 349b429e-7c5f-5fbd-a413-ef731f81ee6e
STIX ID: report--349b429e-7c5f-5fbd-a413-ef731f81ee6e
Threat Score
Citrix released advisories for three critical NetScaler ADC/Gateway vulnerabilities (CVE-2025-5777, CVE-2025-6543, CVE-2025-5349) affecting multiple 12.x–14.x builds; at least CVE-2025-5777 and CVE-2025-6543 have reported active exploitation and CVE-2025-5777 can enable session hijacking and MFA bypass. The advisory includes CVSS scores, affected versions, CISA KEV inclusion, recommended patching and session-kill procedures, and detection/hunting guidance (including an NCSC-NL detection script and file-integrity monitoring recommendations).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.