Which versions of Netscaler Application Delivery Controller are affected by CVE-2025-7775?

CVE-2025-7775 presents critical security risk, a buffer overflow vulnerability rated CVSS 9.2.

Is CVE-2025-7775 being actively exploited?

Yes, CVE-2025-7775 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2025-7775?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Netscaler Application Delivery Controller CVE-2025-7775

Q: What is the CVSS score of CVE-2025-7775?

CVE-2025-7775 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 6.6%.

CRITICAL

Buffer Overflow (CWE-119)

2025-08-26 secure@citrix.com

RCE Buffer Overflow Denial Of Service Citrix Netscaler Application Delivery Controller Netscaler Gateway

9.2

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:08 vuln.today

Added to CISA KEV

Oct 24, 2025 - 13:42 cisa

CISA KEV

CVE Published

Aug 26, 2025 - 13:15 nvd

CRITICAL 9.2

DescriptionCVE.org

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers

(OR)

CR virtual server with type HDX

AnalysisAI

Citrix NetScaler ADC and Gateway contain a memory overflow vulnerability enabling remote code execution and denial of service when configured as VPN, AAA, or load balancing virtual servers.

Technical ContextAI

The CWE-119 memory overflow in NetScaler's request processing affects devices configured as Gateway (VPN, ICA Proxy, CVPN, RDP Proxy), AAA virtual server, or load balancer, covering virtually all deployment scenarios.

RemediationAI

Apply Citrix patches immediately. Monitor for exploitation indicators. Consider the ongoing pattern of NetScaler vulnerabilities when evaluating platform risk.