Citrix Patches Trio of NetScaler Bugs
Citrix fixed three NetScaler flaws, including a critical zero-day with a CVSS score of 9.2 that has been exploited to deploy webshell backdoors in enterprise networks.
- On August 26, 2025, Citrix released fixes for three NetScaler ADC and NetScaler Gateway flaws, including the actively exploited CVE-2025-7775, with patches immediately available.
- CVE-2025-7775 is a memory overflow bug enabling unauthenticated remote code execution or denial of service, exploiting NetScaler ADC and NetScaler Gateway configured as Gateway or AAA virtual servers or specific IPv6-bound LB servers.
- The fixes arrive with credited disclosures from Jimi Sebree, Jonathan Hetzer, and François Hämmerli, and Cloud Software Group warns no workarounds exist, urging upgrades to 14.1-47.48+, 13.1-59.22+, 13.1-37.241+, and 12.1-55.330+.
- Because CISA moved CVE-2025-7775 into its KEV catalog, Federal Civilian Executive Branch agencies must remediate within 48 hours, as attackers deploy persistent webshells, urging emergency patching and response.
- Given NetScaler's history of pre-patch exploitation, NetScaler ADC and NetScaler Gateway remain prime targets for ransomware crews and state-sponsored operators, and exploit code may become available soon.
14 Articles
14 Articles
Citrix NetScaler customers hit by third actively exploited zero-day vulnerability since June
Citrix and cybersecurity researchers warn a critical, zero-day vulnerability affecting multiple versions of Citrix NetScaler products is under active exploitation. Citrix issued a security bulletin about the vulnerability — CVE-2025-7775 — and urged customers on affected versions to install upgrades Tuesday. The memory-overflow vulnerability, which has an initial CVSS rating of 9.2, can be exploited to achieve remote-code execution or denial of …
Citrix Patches Critical Zero-Day in NetScaler ADC and Gateway
In the ever-evolving world of cybersecurity, where threats lurk in the shadows of enterprise networks, Citrix Systems Inc. has once again found itself at the center of a critical patching frenzy. The company recently released updates addressing three high-severity vulnerabilities in its NetScaler Application Delivery Controller (ADC) and NetScaler Gateway products, with one flaw already exploited in the wild as a zero-day. This development under…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium