CVE-2025-5777

high-risk
Published 2025-06-17

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Do I need to act?

!
66.7% chance of exploitation in next 30 days
EPSS score — higher than 33% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
52401
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (4)

Affected Vendors

Citrix

References (10)

Vendor Advisory https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
Broken Link https://citrixbleed.com
Third Party Advisory https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-wri...
Third Party Advisory https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-d...
Press/Media Coverage https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-explo...
Third Party Advisory https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-...
Press/Media Coverage https://www.theregister.com/2025/07/10/cisa_citrixbleed_kev/
Third Party Advisory https://doublepulsar.com/citrixbleed-2-exploitation-started-mid-june-how-to-spot...
Third Party Advisory https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-net...
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-...
62
/ 100
high-risk
Severity 26/34 · High
Exploitability 26/34 · High
Exposure 10/34 · Low