CVE-2025-7776

CVSS 4.0: 8.8 high
EPSS: 7%p94
Published: Aug 26, 2025 · Aug 26, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-7776 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it

Vendors: citrix

Products: netscaler application delivery controller, netscaler gateway

Weakness: CWE-119

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (6.9%)

In the news

9 stories

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

Security AffairsAug 27, 18:20 UTC · Aug 27, 2025Exploit / PoCExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-84242 · 1 read

Citrix Patches Three Zero Days as One Sees Active Exploitation

Infosecurity MagazineAug 27, 11:10 UTC · Aug 27, 2025VulnerabilityExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-8424+11 · 1 read

Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025

The Hacker NewsAug 27, 05:11 UTC · Aug 27, 2025VulnerabilityExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-8424+41

Citrix NetScaler customers hit by third actively exploited zero

CyberScoopAug 26, 21:28 UTC · Aug 26, 2025RansomwareExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-8424+31 · 1 read

Citrix fixed three NetScaler flaws, one of them actively exploited in the wild

Security AffairsAug 26, 19:24 UTC · Aug 26, 2025Exploit / PoCExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-84241 · 1 read

NetScaler ADC/Gateway zero-day exploited by attackers (CVE-2025-7775) - updated!

Help Net SecurityAug 26, 00:00 UTC · Aug 26, 2025Exploit / PoCExploitedCVE-2025-7775 CVE-2025-7776 CVE-2025-84241