Skip to content

CVE · Exploited · On CISA KEV

CVE-2025-5777

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

7.5
CVSS 3.1
1
story
JUL 10
added to KEV
Severity
7.5 High · NVD score
Vendor
Citrix
Product
NetScaler ADC and Gateway
Published
Jun 17, 2025
Added to KEV
Jul 10, 2025
KEV deadline
Jul 11, 2025
Ransomware use
Known
Weakness
CWE-125, CWE-908

What it is

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsAPT Targets Cisco and Citrix Zero DaysThe chain of discovery began with Amazon’s security honeypot service, MadPot, which detected exploitation attempts for the Citrix Bleed Two vulnerability (CVE-2025-5777) before its public disclosureDENNIS FISHER · 2 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorysupport.citrix.com/support-home/kbsearch/articleAnalysiscitrixbleed.com/Analysishorizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybeAnalysislabs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777