CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Affected products

Citrix Netscaler Adc, Citrix Netscaler Gateway

Citrix Netscaler Application Delivery Controller

< 12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56

Citrix Netscaler Gateway

< 13.1-58.32, 14.1-43.56

Fix

Available

CVSS 4.0

9.3 CRITICAL

CVSS 3.1

7.5 HIGH

EPSS

100.0% (100th percentile)

Weakness

CWE-908, CWE-457, CWE-125

NVD status

Analyzed

Published

2025-06-17