Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/06/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-37.236≥ 13.1, < 13.1-59.19≥ 14.1, < 14.1-47.46 | 13.1-37.23613.1-59.1914.1-47.46 |
| netscaler gateway | ≥ 13.1, < 13.1-59.19≥ 14.1, < 14.1-47.46 | 13.1-59.1914.1-47.46 |
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free