Citrix Scrambles to Patch NetScaler Flaws as Cyber Attackers Race Ahead
Thousands of Citrix NetScaler appliances are still exposed to security flaws, despite vendor patches. Shadowserver Foundation data reveals vulnerable systems dropped from 28,000 to 13,000 in a day, but thousands remain at risk. The rush to patch highlights the urgency as CVE-2025-7775, known as CitrixBleed 3, is actively exploited.

Hot Take:
Citrix is back in the headlines, folks! And not for winning any awards. It’s more like that moment when you forget to lock the door, and then realize someone’s made off with your favorite pair of slippers. The clock’s ticking, and while some have patched their NetScaler appliances, others are still out there playing Pokémon GO with vulnerabilities. Gotta patch ‘em all, people!
Key Points:
- Thousands of Citrix NetScaler appliances are still vulnerable to three security flaws.
- The number of unpatched systems has halved but still stands at 13,000 globally.
- One flaw, CVE-2025-7775, is being actively exploited and is a serious threat.
- CISA has made patching mandatory for US federal agencies.
- Security experts warn of imminent large-scale exploitation if patches aren’t applied.
Already a member? Log in here