Skip to main content
HIGH CISA KEV Actively Exploited

CVE-2025-5777

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

CVSS v3

7.5

HIGH

EPSS Score

66.7 %

exploit probability

CISA KEV

Yes

known exploited

Exploitation

active

SSVC status

Description

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

CISA Known Exploited Vulnerability

Date Added
2025-07-10
Patch Due Date
2025-07-11
Ransomware Use
Known

Technical details

CVSS v3 Vector
3.1
Published
2025-06-17
Last Modified
2025-10-30
Exploit-DB
EDB-52401

Frequently asked questions

What is CVE-2025-5777?

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Is CVE-2025-5777 actively exploited?

Yes. CVE-2025-5777 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 2025-07-11.

What is the CVSS score for CVE-2025-5777?

CVE-2025-5777 has a CVSS v3 base score of 7.5 (HIGH severity), with vector string 3.1.

Is CVE-2025-5777 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key