Citrix Product Security Update Advisory (CVE-2025-7775)

Overview

 

We have released security updates to fix vulnerabilities in Citrix products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-7775

 

NetScaler ADC and NetScaler Gateway 14.1 Versions: 14.1-47.48 and earlier
NetScaler ADC and NetScaler Gateway 13.1 Versions: 13.1-59.22 and earlier
NetScaler ADC 13.1-FIPS Version: 13.1-37.241-FIPS or less
NetScaler ADC 13.1-NDcPP Versions: 13.1-37.241-NDcPP and below
NetScaler ADC 12.1 – FIPS Version: 12.1-55.330 – less than FIPS
NetScaler ADC 12.1-NDcPP Versions: 12.1-55.330-NDcPP and below

 

 

Resolved Vulnerabilities

 

Remote code execution and denial of service vulnerability due to a memory overflow in NetScaler ADC (CVE-2025-7775)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-7775

 

NetScaler ADC and NetScaler Gateway 14.1 Version: 14.1-47.48
NetScaler ADC and NetScaler Gateway 13.1 Version: 13.1-59.22
NetScaler ADC 13.1-FIPS Version: 13.1-37.241-FIPS
NetScaler ADC 13.1-NDcPP Version: 13.1-37.241-NDcPP
NetScaler ADC 12.1-FIPS Version: 12.1-55.330-FIPS
NetScaler ADC 12.1-NDcPP Version: 12.1-55.330-NDcPP

 

 

References

 

[1] NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938