CVE-2025-6543
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2025-6543. We'll provide specific mitigation strategies based on your environment and risk profile.
Description
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Available Exploits
Related News
While Citrix has observed some instances where CVE-2025-6543 has been exploited on vulnerable NetScaler networking appliances, the company still says that they don’t have evidence of exploitation for CVE-2025-5349 or CVE-2025-5777, both of which have been pat…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability These types of vulnerabi…
Frequently asked questions about recent Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild, including CVE-2025-5777 known as CitrixBleed 2.BackgroundTenable’s Research Special Operations (RSO) team has compiled th…
A vulnerability was identified in Citrix Products. A remote user can exploit this vulnerability to trigger denial of service condition on the targeted system. Note: CVE-2025-6543 is being exploited in the wild. Memory overflow vulnerability leading to un…
Citrix is warning that a vulnerability in NetScaler appliances tracked as CVE-2025-6543 is being actively exploited in the wild, causing devices to enter a denial of service condition. [...]
Affected Products
Affected Versions:
Affected Versions:
Known Exploited Vulnerability
This vulnerability is actively being exploited in the wild
Remediation Status
Due Date
Added to KEV
Required Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected Product
Ransomware Risk
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Affected Products (ENISA)
ENISA Scoring
CVSS Score (4.0)
EPSS Score
Data provided by ENISA EU Vulnerability Database. Last updated: July 17, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Advisory provided by GitHub Security Advisory Database. Published: June 26, 2025, Modified: July 1, 2025
Social Media Intelligence
Real-time discussions and threat intelligence from social platforms
Citrix NetScaler ADC and NetScaler Gateway Memory overflow vulnerability (CVE-2025-6543)
„Citrix“ kritinis pažeidžiamumas ⚠️ \*\*Svarbi saugumo naujiena!\*\* „Citrix“ išleido skubius atnaujinimus, kad pašalintų kritinį pažeidžiamumą \*\*CVE-2025-6543\*\*. Ši atminties perpildymo klaida paveikia NetScaler ADC ir Gateway versijas. CVSS reitingą 9.2. Rekomenduojame nedelsiant atnaujinti sistemas, kad apsisaugotumėte nuo galimų DoS atakų ir kitų grėsmių. Skaitom: [https://thehackernews.com/2025/06/citrix-releases-emergency-patches-for.html](https://thehackernews.com/2025/06/citrix-releases-emergency-patches-for.html)
🔥 Top 10 Trending CVEs (03/07/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-20309](https://nvd.nist.gov/vuln/detail/CVE-2025-20309)** - 📝 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log …
🔥 Top 10 Trending CVEs (02/07/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-6554](https://nvd.nist.gov/vuln/detail/CVE-2025-6554)** - 📝 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) - …
CVE-2025-6543: Critical Memory Overflow Vulnerability in NetScaler ADC and Gateway
🔥 Top 10 Trending CVEs (01/07/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-32463](https://nvd.nist.gov/vuln/detail/CVE-2025-32463)** - 📝 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. - 📅 **Published:** 30/06/2025 - 📈 …
🔥 Top 10 Trending CVEs (30/06/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-5263](https://nvd.nist.gov/vuln/detail/CVE-2025-5263)** - 📝 Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, …
🔥 Top 10 Trending CVEs (29/06/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-1974](https://nvd.nist.gov/vuln/detail/CVE-2025-1974)** - 📝 A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context …
🔥 Top 10 Trending CVEs (28/06/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-3699](https://nvd.nist.gov/vuln/detail/CVE-2025-3699)** - 📝 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 Version 3.37 and prior, G-50-W Version 3.37 and prior, G-50A Version 3.37 and prior, GB-50 Version 3.37 …
🔥 Top 10 Trending CVEs (27/06/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-20282](https://nvd.nist.gov/vuln/detail/CVE-2025-20282)** - 📝 A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then …