CVE-2025-7775 - CVE House
Back to Database
Status published Critical CVE-2025-7775

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

Vulnerability Description

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7775

Credits & Attribution

No credits recorded in the NVD database.

References

More from NetScaler

View All →
CVE-2025-8424
Improper access control on the NetScaler Management Interface
High 8.7
CVE-2025-7776
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
High 8.8
CVE-2025-6543
Memory overflow vulnerability leading to unintended control flow and Denial of Service
Critical 9.2
CVE-2025-5777
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
Critical 9.3
CVE-2025-5349
NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
High 8.7

Affected Vendor

Affected Software

ADC, Gateway
Vulnerable Versions:
14.1, 13.1, 13.1 FIPS and NDcPP, 12.1 FIPS and NDcPP

Timeline

Official Publish: August 26th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control