CyberzSOC

Citrix warns that exploits of the critical vulnerability, CVE-2025-7775, have been observed on unmitigated It is recommended to update affected assets as soon as possible. The vulnerability CVE-2025-7775, with a CVSS score of 9.2, is due to improper restriction of operations within the bounds of a memory buffer, leading to Remote Code Execution (RCE) and/or Denial of Service [1]. To be exploitable, NetScaler must have one of the following servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups serversoftype(HTTP,SSLorHTTP_QUIC)boundwithDBSIPv6servicesorservicegroups The vulnerability CVE-2025-7776, with a CVSS score of 8.8, is due to improper restriction of operations within the bounds of a memory buffer, leading to unpredictable or erroneous behaviour and Denial of Service. To be exploitable, NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it. The vulnerability CVE-2025-8424, with a CVSS score of 8.7, is due to improper access control.