9.8

CVE-2025-7775: Citrix NetScaler Memory Overflow Vulnerability

CVSS: 9.8v3.1CriticalKEVAnalyzed
Published 26-08-2025Last modified 26-02-2026
Open JSON

Vulnerability summary

CVE-2025-7775 is a critical (CVSS 9.8) vulnerability in Citrix NetScaler. It is known to be exploited: CISA lists it, first on 26-08-2025. EPSS estimates a 20.28% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
20.28%
0%100%
High · +0.65 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 26-08-2025
    PublishedVulnerability first disclosed.
  2. 26-08-2025
    Added to CISA KEVCitrix NetScaler Memory Overflow Vulnerability
  3. 28-08-2025
    CISA remediation dueApply mitigations per vendor instructions.
  4. 26-02-2026
    Last modifiedVulnerability information updated.

Description

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

20.28%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.65 pp

From 19.63% on 18-09-2026

18-09-202618-10-2026
EPSS score
20.28%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
26-08-2025
Federal due date
28-08-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938 nvd.nist.gov/vuln/detail/CVE-2025-7775

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Citrix2 products
Netscaler2 products
  • adc≥ 14.1, < 47.48 | ≥ 13.1, < 59.22 | ≥ 13.1 FIPS and NDcPP, < 37.241 | ≥ 12.1 FIPS and NDcPP, < 55.330
  • gateway≥ 14.1, < 47.48 | ≥ 13.1, < 59.22 | ≥ 13.1 FIPS and NDcPP, < 37.241 | ≥ 12.1 FIPS and NDcPP, < 55.330

2 vendors · 4 products

References

2 links