Citrix · NetScaler

CVE-2025-7775

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

Exploited in attacks Critical 9.2 Attack chance: 21%

What it is

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers

(OR)

CR virtual server with type HDX

CISA: Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.

What to do

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Deadline for US federal agencies: August 28, 2025

Added to the CISA list: August 26, 2025
Published: August 26, 2025
Severity: Critical 9.2 CVSS 4.0
Chance of attacks in the next 30 days (EPSS): 21% in the top 2.5% of all known vulnerabilities
Weakness: CWE-119
More details: NVD · CVE.org · CISA

All references (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938

More exploited flaws from Citrix

Added	Vulnerability	Product	Severity	Attack chance
Oct 4, 2026	Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88779	NetScaler	High 8.7	11%
Sep 27, 2026	Improper Input ValidationCVE-2026-88771	NetScaler	Critical 9.5	82%
Sep 27, 2026	Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88772	NetScaler	Critical 9.5	78%
Sep 9, 2026	Authentication Bypass Using an Alternate Path or ChannelCVE-2026-19490	NetScaler	Critical 9.3	33%
Mar 30, 2026	Out-of-Bounds ReadCVE-2026-3055	NetScaler	Critical 9.3	91%
Aug 26, 2026	Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-8452	NetScaler ADC and NetScaler Gateway	High 8.8	1.0%
Aug 25, 2025	Improper Privilege ManagementCVE-2024-8068	Session Recording	Medium 5.1	3.5%
Aug 25, 2025	Deserialization of Untrusted DataCVE-2024-8069	Session Recording	Medium 5.1	21%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.