Live › vulnerability › CVE-2025-7775
Go to dashboardCitrix NetScaler ADC and NetScaler Gateway have a memory overflow that can allow remote code execution or denial of service. CISA lists it as actively exploited in the wild, so an attacker may run code on the appliance without a login.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix NetScaler | vendor | – | – |
| citrix netscaler application delivery controller | vendor | >= 12.1, < 12.1-55.330 | 12.1-55.330 |
| citrix netscaler application delivery controller | vendor | >= 13.1, < 13.1-37.241 | 13.1-37.241 |
| citrix netscaler application delivery controller | vendor | >= 13.1, < 13.1-59.22 | 13.1-59.22 |
| citrix netscaler application delivery controller | vendor | >= 14.1, < 14.1-47.48 |
| 14.1-47.48 |
| citrix netscaler gateway | vendor | >= 13.1, < 13.1-59.22 | 13.1-59.22 |
| citrix netscaler gateway | vendor | >= 14.1, < 14.1-47.48 | 14.1-47.48 |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers
(OR)
CR virtual server with type HDX
This page as .md · .json · in your agent: get_signal("CVE-2025-7775")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.