VULNERABILITY INTELLIGENCE
CVE-2025-6543
CVSS score9.8 CRITICAL
EPSS probability10.43%
CISA KEVKnown exploited vulnerability
Published2025-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
Vendor / product: Citrix / NetScaler ADC and Gateway
Description
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Weakness classification
- secure@citrix.com: CWE-119
Primary references
- secure@citrix.com — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource