Citrix Crisis: Hackers Exploit NetScaler Vulnerability in New Cyber Comedy of Errors
Citrix warns that hackers are exploiting a critical NetScaler ADC and Gateway vulnerability, CVE-2025-6543, leading to potential chaos. The bug, with a CVSS score of 9.2, rivals CitrixBleed in notoriety. Citrix urges users to patch up before hackers have a field day with their networks.
Hot Take:
***If Citrix vulnerabilities were a movie, they’d be playing a sequel called “NetScaler Panic: The Overflow Strikes Back.”***
Key Points:
– Critical vulnerability CVE-2025-6543 has been discovered in Citrix’s NetScaler ADC and Gateway.
– The bug is a memory overflow issue with a CVSS score of 9.2, potentially leading to denial-of-service (DoS) attacks.
– Affected are only NetScaler setups configured as Gateway or AAA virtual servers.
– Patches for the zero-day vulnerability have been released for several NetScaler versions, but some older versions are discontinued.
– Another critical flaw, CVE-2025-5777, was patched recently, raising concerns for potential exploits.