Back to Database
Status published
High
CVE-2025-8424
Improper access control on the NetScaler Management Interface
Vulnerability Description
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8424
Credits & Attribution
No credits recorded in the NVD database.
More from NetScaler
View All →CVE-2025-7776
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
High
8.8
CVE-2025-7775
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
Critical
9.2
CVE-2025-6543
Memory overflow vulnerability leading to unintended control flow and Denial of Service
Critical
9.2
CVE-2025-5777
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
Critical
9.3
CVE-2025-5349
NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
High
8.7
Affected Vendor
NetScaler
View all reports →Affected Software
ADC, Gateway
Vulnerable Versions:
14.1, 13.1, 13.1 FIPS and NDcPP, 12.1 FIPS and NDcPP
Timeline
Official Publish:
August 26th, 2025
Last Modified:
February 26th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.