CVE-2025-7775criticalunder attackCWE-119

CVE-2025-7775: critical vulnerability in NetScaler ADC

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

Published · Updated

Follow this CVE+ Monitor NetScaler Gateway+ Monitor ADC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

83Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.2epss 21%
from disclosure to weapon2 days
Published on NVDAug 26
1st PoC+2d
CISA KEVAug 26
Action required by CISAfederal deadline: 2025-08-28

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A memory overflow flaw in NetScaler ADC and Gateway can allow attackers to execute arbitrary code or crash the system, depending on how the device is configured (VPN, AAA, load balancing with IPv6, or HDX services). This is a critical issue because it can give attackers complete control or disrupt service.

Technical detail

CWE-119 memory overflow vulnerability affecting NetScaler ADC/Gateway across multiple configurations: Gateway/AAA virtual servers, LB servers with IPv6 backends, and HDX CR servers. Remote attacker can trigger buffer overflow via crafted requests, leading to RCE or DoS without requiring authentication in certain configurations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Affected products
NetScaler · ADCNetScaler · Gateway
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — NetScaler ADC

In the same product, most dangerous first.

CVE-2025-5777CRITICALNetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overreadEPSS 100.0%KEVCVE-2026-3055CRITICALInsufficient input validation leading to memory overreadEPSS 91.5%KEVCVE-2026-19490CRITICALNetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490EPSS 33.3%KEVCVE-2026-88779HIGHMemory overflow vulnerability leading to Denial of ServiceEPSS 11.4%KEVCVE-2025-6543CRITICALMemory overflow vulnerability leading to unintended control flow and Denial of ServiceEPSS 10.4%KEVCVE-2026-8452HIGHMemory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceEPSS 1.0%KEV