Skip to main content
See every side of every news story
Published loading...Updated

Citrix Patches Trio of NetScaler Bugs

Citrix fixed three NetScaler flaws, including a critical zero-day with a CVSS score of 9.2 that has been exploited to deploy webshell backdoors in enterprise networks.

  • On August 26, 2025, Citrix released fixes for three NetScaler ADC and NetScaler Gateway flaws, including the actively exploited CVE-2025-7775, with patches immediately available.
  • CVE-2025-7775 is a memory overflow bug enabling unauthenticated remote code execution or denial of service, exploiting NetScaler ADC and NetScaler Gateway configured as Gateway or AAA virtual servers or specific IPv6-bound LB servers.
  • The fixes arrive with credited disclosures from Jimi Sebree, Jonathan Hetzer, and François Hämmerli, and Cloud Software Group warns no workarounds exist, urging upgrades to 14.1-47.48+, 13.1-59.22+, 13.1-37.241+, and 12.1-55.330+.
  • Because CISA moved CVE-2025-7775 into its KEV catalog, Federal Civilian Executive Branch agencies must remediate within 48 hours, as attackers deploy persistent webshells, urging emergency patching and response.
  • Given NetScaler's history of pre-patch exploitation, NetScaler ADC and NetScaler Gateway remain prime targets for ransomware crews and state-sponsored operators, and exploit code may become available soon.
Insights by Ground AI
Does this summary seem wrong?

14 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources are Center
100% Center

Factuality 

To view factuality data please Upgrade to Premium

Ownership

To view ownership data please Upgrade to Vantage

Help Net Security broke the news in on Tuesday, August 26, 2025.
Sources are mostly out of (0)

Similar News Topics

News
For You
Search
BlindspotLocal