CVE-2025-5777: netscaler application delivery controller from 12.1 (inclusive), before 12.1-55.328 (exclusive), from 13.1…

Affected technology

netscaler application delivery controller · from 12.1 (inclusive), before 12.1-55.328 (exclusive)
citrix

netscaler application delivery controller · from 13.1 (inclusive), before 13.1-37.235 (exclusive)
citrix

netscaler application delivery controller · from 13.1 (inclusive), before 13.1-58.32 (exclusive)
citrix

netscaler application delivery controller · from 14.1 (inclusive), before 14.1-43.56 (exclusive)
citrix

netscaler gateway · from 13.1 (inclusive), before 13.1-58.32 (exclusive)
citrix

netscaler gateway · from 14.1 (inclusive), before 14.1-43.56 (exclusive)
citrix

ADC · 14.1 to before 43.56, 13.1 to before 58.32
NetScaler

Gateway · 14.1 to before 43.56, 13.1 to before 58.32
NetScaler

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.