Actively exploited in the wild
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
Citrix - NetScaler ADC and Gateway · Listed in the CISA KEV since 2025-07-10. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-5777
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Risk Assessment
An attacker may exploit this vulnerability to read data from memory, potentially leading to sensitive information leakage or service disruption.
Recommendation
Apply security updates from the vendor and review NetScaler configuration for required settings.
Original NVD description (English source)
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server