Exploit / PoCcriticalExploited in the wild

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

The Hacker Newsby @TheHackersNewsJul 18, 2025 · 04:54 UTC (Jul 18, 2025)5 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2025-5777 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-5777 CVE-2023-4966 CVE-2025-6543 CVE-2024-36401

Tags: cve-2025-5777 cve-2023-4966 cve-2025-6543 cve-2024-36401 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2024-36401	Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection	9.8	100%	KEVPoC ×3	Jul 1, 2024 KEV Jul 15, 2024
CVE-2025-5777	Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway	9.3	100%	KEVRansomware	Jun 17, 2025 KEV Jul 10, 2025
CVE-2025-6543	Memory Buffer Overflow in Citrix NetScaler ADC and Gateway Exploited in the Wild	9.2	10%	KEV	Jun 25, 2025 KEV Jun 30, 2025

From the original article

5 min read at thehackernews.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities ( KEV ) catalog, officially confirming the vulnerability has been weaponized in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.