Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability — CVE-2025-5777
CISA-KEV · Citrix · CVE-2025-5777
ID
CVE-2025-5777
CVE-2025-5777
Date
Activity
Source
CISA-KEV
CISA-KEV
Vendor
Citrix
Citrix
Threat
critical
critical
EPSS
0.66667
0.66667
Exploited
Yes
Yes
Summary
CVE-2025-5777 is a advisory from CISA-KEV. Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Vendor: Citrix. Severity/Threat: critical. This item is marked as actively exploited.
Product
NetScaler ADC and Gateway
What to do
General, cautious steps (verify details in the official source):
- Prioritize patching or mitigation immediately (treat as actively risky).
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Check logs/telemetry for indicators of compromise and suspicious activity.
- Consider temporary hardening: restrict access, reduce attack surface, and monitor aggressively.
- Read the official advisory for exact affected versions and remediation steps.