---
id: "CVE-2025-7775"
kind: "vulnerability"
aliases: ["CVE-2025-7775"]
title: "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Citrix NetScaler", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "citrix netscaler application delivery controller", "fixed": ["12.1-55.330"], "affected": ">= 12.1, < 12.1-55.330", "ecosystem": "vendor"}, {"name": "citrix netscaler application delivery controller", "fixed": ["13.1-37.241"], "affected": ">= 13.1, < 13.1-37.241", "ecosystem": "vendor"}, {"name": "citrix netscaler application delivery controller", "fixed": ["13.1-59.22"], "affected": ">= 13.1, < 13.1-59.22", "ecosystem": "vendor"}, {"name": "citrix netscaler application delivery controller", "fixed": ["14.1-47.48"], "affected": ">= 14.1, < 14.1-47.48", "ecosystem": "vendor"}, {"name": "citrix netscaler gateway", "fixed": ["13.1-59.22"], "affected": ">= 13.1, < 13.1-59.22", "ecosystem": "vendor"}, {"name": "citrix netscaler gateway", "fixed": ["14.1-47.48"], "affected": ">= 14.1, < 14.1-47.48", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["citrix", "exploited", "infrastructure", "netscaler", "netscaler-gateway", "self-hosted"]
not_affected_if: ["unknown"]
published_at: "2025-08-26T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7775", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and…

Citrix NetScaler ADC and NetScaler Gateway have a memory overflow that can allow remote code execution or denial of service. CISA lists it as actively exploited in the wild, so an attacker may run code on the appliance without a login.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Citrix NetScaler affected ? fixed ?
- vendor:citrix netscaler application delivery controller affected >= 12.1, < 12.1-55.330 fixed 12.1-55.330
- vendor:citrix netscaler application delivery controller affected >= 13.1, < 13.1-37.241 fixed 13.1-37.241
- vendor:citrix netscaler application delivery controller affected >= 13.1, < 13.1-59.22 fixed 13.1-59.22
- vendor:citrix netscaler application delivery controller affected >= 14.1, < 14.1-47.48 fixed 14.1-47.48
- vendor:citrix netscaler gateway affected >= 13.1, < 13.1-59.22 fixed 13.1-59.22
- vendor:citrix netscaler gateway affected >= 14.1, < 14.1-47.48 fixed 14.1-47.48

## Fix

Apply the vendor mitigation or patch from Citrix for CVE-2025-7775; the sources do not name the fixed version. If no mitigation exists, CISA says to discontinue use of the product.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-7775

## From the sources

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers 

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers

(OR)

CR virtual server with type HDX

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_