In CISA KEV9.3 CriticalCWE-125Ransomware use
CVE-2025-5777
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
CitrixNetScaler ADC and Gateway
Status
- Exploited in the wild
- In CISA KEV since 10 Jul 2025
- Vendor fix available
- Known ransomware use
Federal deadlineFri 11 Jul 2025, 23:59 UTC
Passed 470 days ago
CISA KEV · added 10 Jul 2025
Exploit probabilityEPSSchecked 25 Oct
99.9%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
9.3Critical
Description NVD
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 1 article · 1 outlet
- ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News · first in our coverage · mentions it in passing