CVE-2025-5349

—

CVSS 4.0

8.7 high

EPSS

5%p91

Published

Jun 17, 2025 (Jun 17, 2025)

Modified

Jun 17, 2026

Description

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

Vendors: citrix
Products: netscaler application delivery controller, netscaler gateway
Weakness: CWE-1284
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news11 stories

Pennsylvania attorney general says cyberattack knocked phone, email systems offline

The RecordAug 13, 12:40 UTC · Aug 13, 2025Data breach CVE-2025-5777 CVE-2025-5349 CVE-2025-6543

60

U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJul 15, 23:33 UTC · Jul 15, 2025Exploit / PoC in the wildCVE-2025-5777 CVE-2023-4966 CVE-2025-5349

60

Researchers Share CitrixBleed 2 Detection Analysis After Initial Hold

Infosecurity MagazineJul 7, 14:00 UTC · Jul 7, 2025Exploit / PoC CVE-2025-5777 CVE-2025-5349

60

Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome

Help Net SecurityJul 6, 00:00 UTC · Jul 6, 2025Vulnerability in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-6554+4 CVEs

60

⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More

The Hacker NewsJun 30, 13:01 UTC · Jun 30, 2025Malware CVE-2025-2783 CVE-2025-34509 CVE-2025-34510+17 CVEs

60

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-6543 CVE-2025-5349+1 CVEs

60

CitrixBleed 2 Vulnerability Exploited

Infosecurity MagazineJun 27, 10:15 UTC · Jun 27, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-5349 CVE-2023-4966+1 CVEs

60

CitrixBleed 2:a nightmare that echoes CitrixBleed flaw in NetScaler

Security AffairsJun 26, 07:31 UTC · Jun 26, 2025Vulnerability CVE-2025-5777 CVE-2023-4966 CVE-2025-5349

60

Citrix users hit by actively exploited zero

CyberScoopJun 25, 20:38 UTC · Jun 25, 2025Ransomware in the wildCVE-2025-6543 CVE-2025-5777 CVE-2025-5349+1 CVEs

60

Citrix warns of exploitation of Netscaler devices through new bugs

The RecordJun 25, 20:23 UTC · Jun 25, 2025Ransomware CVE-2025-6543 CVE-2025-5349 CVE-2025-5777

60

Critical Citrix NetScaler bug fixed, upgrade ASAP! (CVE-2025-5777)

Help Net SecurityJun 25, 18:15 UTC · Jun 25, 2025Vulnerability in the wildCVE-2025-5777 CVE-2023-4966 CVE-2025-5349+1 CVEs

60