CVE-2025-7775: listed in the CISA KEV catalog

CVE-2025-7775 · CVSS 9.8 CRITICAL · EPSS 20% · KEV 2025-08-26 · patch available

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

Is CVE-2025-7775 exploited?

• Listed in the CISA KEV catalog on 2025-08-26.
• Federal remediation due 2025-08-28.
• Past that date by 398 days.
• EPSS puts exploitation in the next 30 days at 20%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

• NetScaler · ADC · >= 14.1, < 47.48, >= 13.1, < 59.22, >= 13.1 FIPS and NDcPP, < 37.241, >= 12.1 FIPS and NDcPP, < 55.330
• NetScaler · Gateway · >= 14.1, < 47.48, >= 13.1, < 59.22, >= 13.1 FIPS and NDcPP, < 37.241, >= 12.1 FIPS and NDcPP, < 55.330
• citrix · netscaler application delivery controller · >= 12.1, < 12.1-55.330, >= 13.1, < 13.1-37.241, >= 13.1, < 13.1-59.22, >= 14.1, < 14.1-47.48
• citrix · netscaler gateway · >= 13.1, < 13.1-59.22, >= 14.1, < 14.1-47.48

Is there a patch?

• netscaler application delivery controller 12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48
• netscaler gateway 13.1-59.22, 14.1-47.48

What PlainSec published about CVE-2025-7775

• Citrix NetScaler Exploitation Hits Gateways in the Wild (2026-09-29)

Primary sources

• NVD record
• CISA KEV catalog

KEV and EPSS are re-checked daily. Record last updated 2026-09-29.