Skip to content
VulniPulse
Sign in
Highest advisory severityCritical Exploited CISA KEV 1 vendor · 1 advisory

CVE-2025-7775

CVE-2025-7775: 1 tracked advisory record across NetScaler. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

NetScaler

1 advisory
  • Advisory severityCritical9.2

    Critical [CVE-2025-7775 +2] Critical security update announced for NetScaler Gateway and NetScaler

    critical-security-update-announced-for-netscaler-gateway-and-netscalerSource published

    This bulletin covers 3 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    Cloud Software Group released builds on August 26, 2025, to address three security vulnerabilities. NetScaler Gateway & NetScaler is affected by CVE-2025-7775, which has a CVSS score of 9.2. CVE-2025-7776 impacts NetScaler Gateway (CVSS 8.8), CVE-2025-8424 impacts NetScaler (CVSS 8.7).

    Related products — impact not confirmed
    • NetScaler ADC
    • NetScaler Gateway
    • NetScaler Console
    Source-reported affected versions
    • NetScaler ADC and NetScaler Gateway 14.1 before 14.1-47.48
    • NetScaler ADC and NetScaler Gateway 13.1 before 13.1-59.22
    • NetScaler ADC 13.1-FIPS and NDcPP before 13.1-37.241-FIPS
    • NetScaler ADC 12.1-FIPS and NDcPP before 12.1-55.330-FIPS
    Source-reported fixed versions
    • 14.1-47.48
    • 13.1-59.22
    • 13.1-37.241-FIPS
    • 12.1-55.330-FIPS

    2 more entries in the full advisory.

    Mitigation guidance
    • Upgrade to a fixed build: 14.1-47.48, 13.1-59.22, 13.1-37.241-FIPS, 12.1-55.330-FIPS, 13.1-37.241, 12.1-55.330 or later for your release line.
    • As of August 26, 2025 Cloud Software Group has reason to believe that exploits of CVE-2025-7775 on unmitigated appliances have been observed, and strongly recommends customers to upgrade their NetScaler firmware to the versions containing the fix as there are no mitigations available to protect against a potential exploit.
    • If access to NetScaler console isn’t gated by IDAM solutions or if local authentication is still being used, CSG strongly recommends customers to consider using IDAM solutions and disabling local authentication.
    • Additionally, NetScaler secure deployment practices recommend that NSIP not be exposed to the internet.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future NetScaler CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features