This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Citrix fixes 3 vulnerabilities

Citrix fixes 3 vulnerabilities in its products [1]. The vulnerability CVE-2025-7775 has been added to the CISA Known Exploited Vulnerabilities catalog [2]. Individual products and their fixed versions: NetScaler ADC - 14.1-47.48, 13.1-59.22, 13.1-37.241-FIPS, 13.1-37.241-NDcPP, 12.1-55.330-FIPS, 12.1-55.330-NDcPP [1] NetScaler Gateway - 14.1-47.48, 13.1-59.22 [1]

Citrix NetScaler ADC, NetScaler Gateway - RCE, DoS (CVE-2025-7775)
CVSS 9.2 (Critical)

An unauthenticated remote attacker is able to execute arbitrary code or carry out a DoS attack. Detailed information on the specific vulnerable configurations can be found at [1].

The vulnerability is present in products:

  • NetScaler ADC; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22; 13.1-FIPS, <13.1-37.241-FIPS; >=13.1-NDcPP, <13.1-37.241-NDcPP; >=12.1-FIPS, <12.1-55.330-FIPS; >=12.1-NDcPP, <12.1-55.330-NDcPP
  • NetScaler Gateway; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22

CVSS: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

More information:

  • CVE-2025-7775 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 26. 8. 2025.

Citrix NetScaler ADC, NetScaler Gateway - DoS (CVE-2025-7776)
CVSS 8.8 (High)

An unauthenticated remote attacker is able to cause unpredictable or erroneous system behavior and carry out a DoS attack if the product is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with a PCoIP profile bound [1].

The vulnerability is present in products:

  • NetScaler ADC; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22; 13.1-FIPS, <13.1-37.241-FIPS; >=13.1-NDcPP, <13.1-37.241-NDcPP; >=12.1-FIPS, <12.1-55.330-FIPS; >=12.1-NDcPP, <12.1-55.330-NDcPP
  • NetScaler Gateway; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22

CVSS: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L

More information:

  • CVE-2025-7776 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 26. 8. 2025.

Citrix NetScaler ADC, NetScaler Gateway - improper access control (CVE-2025-8424)
CVSS 8.7 (High)

An unauthenticated attacker on the local network is able to read files on the device without authorization if they have access to the NetScaler IP (NSIP), Cluster Management IP (CLIP), Global Server Load Balancing Site IP (GSLB IP) or Subnet IP (SNIP) with management access enabled [1].

The vulnerability is present in products:

  • NetScaler ADC; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22; 13.1-FIPS, <13.1-37.241-FIPS; >=13.1-NDcPP, <13.1-37.241-NDcPP; >=12.1-FIPS, <12.1-55.330-FIPS; >=12.1-NDcPP, <12.1-55.330-NDcPP
  • NetScaler Gateway; >=14.1, <14.1-47.48; >=13.1, <13.1-59.22

CVSS: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

More information:

The vulnerability was publicly disclosed 26. 8. 2025.

By CESNET, z.s.p.o. Michaela Jarošová on 27. 8. 2025.

CESNET, z.s.p.o. Logo