Vulnerabilitycritical

CitrixBleed 2:a nightmare that echoes CitrixBleed flaw in NetScaler

Security Affairsby @securityaffairsJun 26, 2025 · 07:31 UTC (Jun 26, 2025)2 min read1

Read at securityaffairs.com

Analyze CVE-2025-5777 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-5777 CVE-2023-4966 CVE-2025-5349

Tags: cve-2025-5777 cve-2023-4966 cve-2025-5349 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2025-5349	Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway	8.7	5%		Jun 17, 2025
CVE-2025-5777	Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway	9.3	100%	KEVRansomware	Jun 17, 2025 KEV Jul 10, 2025

From the original article

2 min read at securityaffairs.com

New Citrix flaw ‘CitrixBleed 2’ lets attackers steal session cookies without logging in, echoing a previously exploited vulnerability. A new flaw in Citrix NetScaler ADC and Gateway, dubbed ‘ CitrixBleed 2 ‘ (CVE-2025-5777, CVSS v4. 0 Base Score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.