Multiple vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway (July 1, 2025)

unknownpublic exploitCVE-2025-6543 CVE-2025-5777

[Update on July 17, 2025] The vendor has published a link containing a method for assessing attempts to exploit in application and system logs [12]. [Update on July 7, 2025] On June 17, 2025, Citrix released a security bulletin...

CSIRTS triage

vendor: Citrix product: NetScaler ADC and NetScaler GatewayOther

What: Multiple vulnerabilities have been identified.
Who is affected: Users of Citrix NetScaler ADC and NetScaler Gateway.
Urgency: Remediation is urgent as exploitation attempts have been detected.
Action: Refer to the security bulletin for mitigation methods.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch NetScaler ADC and NetScaler Gateway

Get an email when a new NetScaler ADC and NetScaler Gateway advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Alertes de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2025-07-01
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2025-ALE-009/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2025-65439.8% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 95% of all scored CVEs.
Exploitation likely imminentCVE-2025-5777EPSS puts this in the most-targeted tier (99.9% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2025-6543	coverage & exploitation status	NVD · CVE.org
CVE-2025-5777	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

criticalexploitedCVE-2025-5777: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerabilitycisa-kev
criticalexploitedCVE-2025-6543: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerabilitycisa-kev

Recent advisories for Citrix NetScaler ADC

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[UPDATE] [high] Citrix Systems NetScaler ADC and Gateway: Multiple vulnerabilitiescert-bund · 2026-07-02
unknownNCSC-2026-0216 [1.00] [M/H] Vulnerabilities fixed in Citrix Netscaler ADC and Netscaler Gatewayncsc-nl · 2026-06-30
unknown2026-003: Multiple Vulnerabilities in Citrix NetScaler and Citrix ADCcert-eu · 2026-03-23
unknownexploitedVulnerability in Citrix NetScaler ADC and NetScaler Gateway (August 26, 2025)cert-fr-alerte · 2025-08-26
criticalexploitedCVE-2025-5777: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerabilitycisa-kev · 2025-07-10
criticalexploitedCVE-2025-6543: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerabilitycisa-kev · 2025-06-30