Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know

**Executive summary:** On June 17–25, 2025 Citrix disclosed three critical vulnerabilities in NetScaler ADC and Gateway (CVE-2025-5777, CVE-2025-5349, CVE-2025-6543) that can leak sensitive memory/session tokens, allow unauthorized management access, and enable memory-overflow conditions with confirmed 0-day exploitation; organizations should apply vendor patches immediately, terminate active sessions, and rotate potentially exposed credentials.