Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N H P N N H H H 9.2 .1963 97.3 YES
AFFECTED Product Versions Fixed ADC 14.1 – — Gateway 14.1 – —
TIMELINE Jul 17 Reserved by Citrix Aug 26 Added to CISA KEV, remediation due 2025-08-28 Aug 26 Published (CNA: Citrix)
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX
| Date | Event | Detail |
|---|---|---|
| July 17, 2025 | Reserved | Reserved by Citrix |
| August 26, 2025 | KEV ADDED | Added to CISA KEV, remediation due 2025-08-28 |
| August 26, 2025 | Published | Published (CNA: Citrix) |
Authoritative record: CVE-2025-7775 at cve.org
Vendors: netscaler
Weaknesses: CWE-119
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-7775 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
