CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-06-17
Citrix NetScaler ADC and Gateway Memory Disclosure Vulnerability (CVE-2025-5777, CitrixBleed 2.0) Urgent Security Advisory
[Affected Scope] Citrix NetScaler ADC and Gateway appliances configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can exploit insufficient input validation to read sensitive system memory, potentially exposing active session tokens and credentials
[Mitigation] Immediately apply the official security patches provided by Citrix (CTX693420) and terminate all active user sessions