Riskcovery

CVE-2025-7775

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

State
Published
Severity
9.2 Critical
Published
Aug 26, 2025
Updated
Feb 26, 2026
Reserved
Jul 17, 2025

Read the record on cve.org

Description

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers

(OR)

NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers

(OR)

CR virtual server with type HDX

Scores

CVSSScoreVectorSource
4.09.2 CriticalCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:LCitrix

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
ADCNetScaler
  • 14.1 to before 47.48Affected
  • 13.1 to before 59.22Affected
  • 13.1 FIPS and NDcPP to before 37.241Affected
  • 12.1 FIPS and NDcPP to before 55.330Affected
GatewayNetScaler
  • 14.1 to before 47.48Affected
  • 13.1 to before 59.22Affected
  • 13.1 FIPS and NDcPP to before 37.241Affected
  • 12.1 FIPS and NDcPP to before 55.330Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.