CVSS 4.0
9.2 criticalCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:LCVE-2025-6543
Critical (9.2) in Citrix NetScaler ADC and Gateway. In CISA KEV since 2025-06-30. EPSS 10% chance of exploitation in the next 30 days.
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2025-06-30, due 2025-07-21
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- citrix:netscaler_application_delivery_controller
- citrix:netscaler_gateway