Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-5777 | Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway | 9.3 | 100% | KEVRansomware | KEV |
| CVE-2025-6543 | Memory Buffer Overflow in Citrix NetScaler ADC and Gateway Exploited in the Wild | 9.2 | 10% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
FortiGuard Labs has reported a dramatic spike in exploitation attempts targeting CitrixBleed 2 , a critical buffer over‑read flaw (CVE‑2025‑5777) affecting Citrix NetScaler ADC (Application Delivery Controller) and Gateway devices.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.