Citrix NetScaler ADC and Gateway has been exploited: Patch now!

 The US Cybersecurity and Information Security Agency (CISA) has alerted on exploitation of a vulnerability in NetScaler ADC and NetScaler Gateway. The products were previously known as Citrix ADC and Citrix Gateway respectively.

CVE-2025-5777 affects versions 14.1 BEFORE 14.1-43.56 of the two products as well as 13.1 BEFORE 13.1-58.32. The Out-of-Bounds Read vulnerability has a CVSS v4.0 Base Scre of 9.3.

Comments

Post a Comment

Popular posts from this blog

Fortinet FortiWeb has been exploited! Patch Now!

 The US Cybersecurity and Infrastructure Securityn Agency (CISA) has provided an alert on exploitation of Fortinet FortiWeb through a SQL injection vulnerability that is tracked as CVE-2025-25257. The critical vulnerability exists in the following versions of the security product: 7.6.0 through 7.6.3, 7.4.0 through 7.4.7 and 7.2.0 through 7.2.10 and those below 7.0.10. The upgrades for each of the ranges has been provided by Fortinet. For working around the SQL injection vulnerability, the HTTP/HTTPS administrative interface msut be disabled.
Read more