CVE-2025-5777

HIGHCVSS 7.5100% EPSSKEV — known exploited🔒 Used in ransomware🧨 Public exploit (GreyNoise)

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Published 2025-06-17 · last modified 2026-08-04

Affected products

VendorProduct
citrixnetscaler_application_delivery_controller
citrixnetscaler_gateway

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.