CVE · Exploited · On CISA KEV

CVE-2025-7775

Citrix NetScaler Memory Overflow Vulnerability

9.8: CVSS 3.1
1: story
AUG 26: added to KEV

Severity: 9.8 Critical · NVD score
Vendor: Citrix
Product: NetScaler
Published: Aug 26, 2025
Added to KEV: Aug 26, 2025
KEV deadline: Aug 28, 2025
Ransomware use: Unknown
Weakness: CWE-119

What it is

Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑

AUG 27
Citrix CVE-2025-7775 Under Active AttackThe vulnerability (CVE-2025-7775) is a buffer overflow that can lead to remote code execution and attackers were already targeting it before the public disclosure.DENNIS FISHER · 2 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record RegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorysupport.citrix.com/support-home/kbsearch/article