high7.5Known exploitedPublic exploit code
CVE-2025-5777
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-07-10. Federal due date: 2025-07-11.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure2025-08-11 · remote · multiple
Impact
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Netscaler Application Delivery Controller | from 12.1 before 12.1-55.328 from 13.1 before 13.1-37.235 from 13.1 before 13.1-58.32 from 14.1 before 14.1-43.56 |
| Citrix | Netscaler Gateway | from 13.1 before 13.1-58.32 from 14.1 before 14.1-43.56 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
- https://citrixbleed.com
- https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybe/
- https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777/
- https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch/
- https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/
- https://www.theregister.com/2025/07/10/cisa_citrixbleed_kev/
- https://doublepulsar.com/citrixbleed-2-exploitation-started-mid-june-how-to-spot-it-f3106392aa71
- https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5777