CVE-2025-7775: Citrix NetScaler Memory Overflow Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
Other sources
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTPQUIC) bound with IPv6 services or servicegroups bound with IPv6 servers
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTPQUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers
(OR)
CR virtual server with type HDX
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7775?
CVE-2025-7775 is classified as a critical vulnerability that can lead to Remote Code Execution and Denial of Service.
How do I fix CVE-2025-7775?
To fix CVE-2025-7775, it is recommended to update your Citrix NetScaler ADC and NetScaler Gateway to the latest patched version.
What systems are affected by CVE-2025-7775?
CVE-2025-7775 affects Citrix NetScaler ADC and Citrix NetScaler Gateway configured as Gateway and AAA virtual servers.
What are the potential risks associated with CVE-2025-7775?
The risks associated with CVE-2025-7775 include unauthorized access and control over affected systems, leading to data breaches.
Is there a workaround for CVE-2025-7775 until a patch is applied?
There are no official workarounds for CVE-2025-7775; applying the necessary updates is the recommended approach.