CVE-2025-8424: Improper access control on the NetScaler Management Interface
Published Aug 26, 2025
·Updated
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Affected Software
2 affected components
Citrix NetScaler ADC
Citrix NetScaler Gateway
Event History
Aug 26, 2025
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
News Published
via The Register·03:40 PM
News Published
via The Register·03:43 PM
News Published
via BleepingComputer·09:37 PM
News Published
via BleepingComputer·09:39 PM
Aug 27, 2025
News Published
via BleepingComputer·04:48 PM
Aug 28, 2025
News Published
via The Register·01:17 PM
Sep 3, 2025
News Published
via BleepingComputer·06:03 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-8424?
CVE-2025-8424 is classified as a critical severity vulnerability due to improper access control.
2
How do I fix CVE-2025-8424?
To fix CVE-2025-8424, ensure that proper access controls are configured for the NetScaler Management Interface.
3
Which products are affected by CVE-2025-8424?
CVE-2025-8424 affects Citrix NetScaler ADC and Citrix NetScaler Gateway.
4
What are the potential consequences of CVE-2025-8424?
Exploiting CVE-2025-8424 could allow an unauthorized user to gain management access to critical network components.
5
How can I determine if I am vulnerable to CVE-2025-8424?
You can determine vulnerability to CVE-2025-8424 by checking the configuration of access controls on your NetScaler devices.