Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2025-5777

CVSS 7.5 Actively exploited (KEV) 2 detections found
View on NVD →
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Detection rules

Source Rule Status Updated
splunk Cisco Secure Firewall - Citrix NetScaler Memory Overread Attempt production 2026-05-13
splunk Citrix ADC and Gateway CitrixBleed 2 Memory Disclosure production 2026-05-13