CVE-2025-5349

HIGH 8.8CVE-2025-5349 · Published 17/06/2025 · updated 17/06/2026

In short

CVE-2025-5349 is a HIGH (CVSS 8.8) vulnerability affecting netscaler application delivery controller (citrix), netscaler gateway (citrix).
Chance of exploitation in the next 30 days (EPSS): 6.6%, higher than 93.8% of all vulnerabilities.
Fix: update to 12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 or later.

Package	Affected versions	Patched versions
netscaler application delivery controller citrix	`≥ 12.1, < 12.1-55.328≥ 13.1, < 13.1-37.235≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.56`	`12.1-55.32813.1-37.23513.1-58.3214.1-43.56`
netscaler gateway citrix	`≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.56`	`13.1-58.3214.1-43.56`

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

In short

CVE-2025-5349 is a HIGH (CVSS 8.8) vulnerability affecting netscaler application delivery controller (citrix), netscaler gateway (citrix).

Chance of exploitation in the next 30 days (EPSS): 6.6%, higher than 93.8% of all vulnerabilities.

Fix: update to 12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 or later.

Package

Affected versions

Patched versions

≥ 12.1, < 12.1-55.328≥ 13.1, < 13.1-37.235≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.56

12.1-55.32813.1-37.23513.1-58.3214.1-43.56

≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.56

13.1-58.3214.1-43.56

More vulnerabilities in netscaler application delivery controller

See all →