CVE-2025-5777 Citrix NetScaler Memory Disclosure

漏洞描述

Insufficient input validation leading to memory overread on the NetScaler Management Interface NetScaler ADC and NetScaler Gateway

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2026-3055 Citrix NetScaler SAML IDP - Memory Overread Citrix-NetScaler Citrix Gateway Citrix-ADC+1	严重	—	—	PoCEXP	2026/06/25
CVE-2023-6549 Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read netscaler_gateway	严重	—	—	PoCEXP	2025/11/20
CVE-2023-4966RCE Citrix Bleed - Leaking Session Tokens Citrix Gateway netscaler_application_delivery_controller netscaler_gateway	高危	7.5	94.4%	PoCEXP	2023/10/10
netscaler_gateway Netscaler Gateway netscaler_gateway	低危	—	—	PoCEXP	2020/10/10
CVE-2020-8195RCE CVE-2020-8195 Citrix Gateway citrix-access-gateway application_delivery_controller_firmware+2	中危	6.5	85.3%	PoCEXP	2020/07/10
CVE-2017-17382 CVE-2017-17382 netscaler_gateway	中危	5.9	77.8%	PoCEXP	2017/12/13