Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Citrix NetScaler Memory Disclosure 'Citrix Bleed 2' (CVE-2025-5777) - Vulnerability Database

Citrix NetScaler Memory Disclosure 'Citrix Bleed 2' (CVE-2025-5777)

Description

Invicti determined that it is possible to leak memory from Citrix NetScaler. Due to a memory disclosure vulnerability, an unauthenticated attacker can extract sensitive information from the system, potentially leading to its compromise.

Remediation

Upgrade to the latest version of Citrix NetScaler

References

How Much More Must We Bleed? - Citrix NetScaler Memory Disclosure (CitrixBleed 2 CVE-2025-5777)
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-5349 and CVE-2025-5777

Related Vulnerabilities

Citrix ADC NetScaler Local File Inclusion (CVE-2020-8193) Medium
Common tags: Information Disclosure Missing Update Known Vulnerabilities
Citrix NetScaler Memory Disclosure 'Citrix Bleed' (CVE-2023-4966) Critical
Common tags: Information Disclosure Missing Update Known Vulnerabilities
WebLogic CVE-2021-2135 Vulnerability (CVE-2021-2135) Critical
Common tags: Missing Update Known Vulnerabilities
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7925) Medium
Common tags: Missing Update Known Vulnerabilities
Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7903) High
Common tags: Missing Update Known Vulnerabilities

Severity

Critical

Classification

CVE-2025-5777
CVE-2025-5349
CWE-457
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Information Disclosure
Missing Update
Known Vulnerabilities