Vulnerabilities CVE-2025-5777

CVE-2025-5777

Critical

Open

KEV

TLP:CLEAR

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Details

CVSS Score: 9.3
EPSS Score ⓘ: 99.96%

100th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Confidence: 100%
Published: Jun 17, 2025
Last Modified: Aug 4, 2026
CISA KEV
Date Added: Jul 10, 2025
Patch Due: Jul 11, 2025
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.