Serial number: AV25-543
Date: August 26, 2025
On August 26, 2025, Citrix published a security advisory to address vulnerabilities in the following products:
- NetScaler ADC and NetScaler Gateway 14.1 – versions prior to 14.1-47.48
- NetScaler ADC and NetScaler Gateway 13.1 – versions prior to 13.1-59.22
- NetScaler ADC 13.1-FIPS and NDcPP – versions prior to 13.1-37.241-FIPS and NDcPP
- NetScaler ADC 12.1-FIPS and NDcPP – versions prior to 12.1-55.330-FIPS and NDcPP
Citrix has reported that exploits of CVE-2025-7775 on unmitigated appliances have been observed.
The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.