CVE-2025-7776

What it is

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it

At a glance

Exploitability

Can be exploited over the network without logging in. High risk of service disruption.

Exploit odds

9.1% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2025-08-26 13:15 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-06-17 10:05 UTC Last updatedMost recent change to the record

Details

Published

2025-08-26 13:15 UTC

Last modified

2026-06-17 10:05 UTC

Exploit probability

9.1% · EPSS, next 30 days

Weakness

CWE-119 · Buffer errors

Record status

Analyzed

Affected

• Citrix Netscaler Application Delivery Controller < 12.1-55.330
• Citrix Netscaler Application Delivery Controller < 13.1-37.241
• Citrix Netscaler Application Delivery Controller < 13.1-59.22
• Citrix Netscaler Application Delivery Controller < 14.1-47.48
• Citrix Netscaler Gateway < 13.1-59.22
• Citrix Netscaler Gateway < 14.1-47.48

Attack profile CVSS 4.0 · 8.8

Attack vector

Network

Complexity

Low

Attack requirements

None

Privileges needed

None

User interaction

None

Confidentiality

Low

Integrity

Low

Availability

High