Critical severity · published Aug 26, 2025
CVE-2025-7775
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
In wildKEV
9.8
CVSS
20.7%
EPSS
Yes
On KEV
Description
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers
(OR)
CR virtual server with type HDX
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)20.7% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed Aug 26, 2025
Federal remediation dueAug 28, 2025
Ransomware campaign useNot known
Affected products
Which versions
NA
NetScaler ADC · Citrix
12.1 before 12.1-55.330; 12.1 before 12.1-55.330; 13.1 before 13.1-37.241; 13.1 before 13.1-37.241; 13.1 before 13.1-59.22; 14.1 before 14.1-47.48 · source: NVD, KEV
AD
ADC · NetScaler
14.1 before 47.48; 13.1 before 59.22; 13.1 FIPS and NDcPP before 37.241; 12.1 FIPS and NDcPP before 55.330 · source: vendor
GA
Gateway · NetScaler
14.1 before 47.48; 13.1 before 59.22; 13.1 FIPS and NDcPP before 37.241; 12.1 FIPS and NDcPP before 55.330 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7775
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7775
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
support.citrix.com
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938
More from NetScaler ADC
9.8
CVE-2026-88771
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
9.8
CVE-2026-19490
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
9.8
CVE-2026-8452
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
9.8
CVE-2026-3055
Insufficient input validation leading to memory overread
9.8
CVE-2025-6543
Memory overflow vulnerability leading to unintended control flow and Denial of Service