[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4IudTyKvPFnv_WrCyV20LxkV29xnqMBXvngnu9PVr30":3,"g5a-risk:CVE-2025-5777":202},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":43,"references":44,"referencesCount":90,"weaknesses":91,"weaknessesCount":112,"isActivelyExploited":4,"cisaInfo":113,"otxData":26,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":170,"notableEvents":171},"CVE-2025-5777","What is CVE-2025-5777?","Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AA...","2025-06-17T13:15:21.523","2025-10-30T20:10:26.47",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],0.99972,[31,31,31,31,31,31,31],"High",[35,40],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"citrix","netscaler_application_delivery_controller","*","cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",{"vendor":36,"product":41,"version":38,"criteria":42,"vulnerable":4},"netscaler_gateway","cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",2,[45,50,56,60,64,69,73,77,81,85],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fsupport.citrix.com\u002Fsupport-home\u002Fkbsearch\u002Farticle?articleNumber=CTX693420","Citrix",[49],"Vendor Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fcitrixbleed.com","Citrixbleed",[54,55],"Third Party Advisory","Broken Link",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fhorizon3.ai\u002Fattack-research\u002Fattack-blogs\u002Fcve-2025-5777-citrixbleed-2-write-up-maybe\u002F","Horizon3",[54],{"url":61,"source":62,"tags":63},"https:\u002F\u002Flabs.watchtowr.com\u002Fhow-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777\u002F","Watchtowr",[54],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch\u002F","Bleepingcomputer",[68,54],"Press\u002FMedia Coverage",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.netscaler.com\u002Fblog\u002Fnews\u002Fnetscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777\u002F","Netscaler",[54],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.theregister.com\u002F2025\u002F07\u002F10\u002Fcisa_citrixbleed_kev\u002F","Theregister",[68],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fdoublepulsar.com\u002Fcitrixbleed-2-exploitation-started-mid-june-how-to-spot-it-f3106392aa71","Doublepulsar",[54],{"url":82,"source":83,"tags":84},"https:\u002F\u002Freliaquest.com\u002Fblog\u002Fthreat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices\u002F","Reliaquest",[54],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5777","CISA",[89],"US Government Resource",10,[92,100,106],{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":99},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":101,"name":102,"description":103,"extendedDescription":104,"status":97,"abstraction":105,"structure":99},"CWE-457","Use of Uninitialized Variable","The code uses a variable that has not been initialized, leading to unpredictable or unintended results.","In some languages such as C and C++, stack variables are not initialized by default. They generally contain junk data with the contents of stack memory before the function was invoked. An attacker can sometimes control or read these contents. In other languages or conditions, a variable that is not explicitly initialized can be given a default value that has security implications, depending on the logic of the program. The presence of an uninitialized variable can sometimes indicate a typographic error in the code.","Variant",{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":98,"structure":99},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete",3,{"shortDescription":96,"requiredAction":96,"vulnerabilityName":96,"dateAdded":26},[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2025-5777? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-5777, a high severity cyber security vulnerability from 2025. High exploit probability (100.0%). Insufficient input valida...","CVE-2025-5777, CVE-2025-5777 vulnerability, CVE-2025-5777 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, citrix security, netscaler_application_delivery_controller vulnerability, netscaler_gateway vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-5777",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-5777","Cybersecurity","CVE-2025-5777, CVE-2025-5777 vulnerability, CVE-2025-5777 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141],{"Operator":26,"Negate":26,"Nodes":142},[143],{"Operator":144,"Negate":145,"CPEMatch":146},"OR",false,[147,151,155,158,162,166,168],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":26},"D907BEC2-6930-4989-A6E1-847B4763BB12","12.1","12.1-55.328",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":153,"VersionEndExcluding":154,"VersionEndIncluding":26},"7AF5A6EE-84A9-42AA-BC4B-7C3367D08CAF","13.1","13.1-37.235",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":153,"VersionEndExcluding":154,"VersionEndIncluding":26},"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","E219F46B-FCBE-4DA2-9094-6ED128E8AF66",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":153,"VersionEndExcluding":161,"VersionEndIncluding":26},"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","48A64F62-2A5A-40CB-A507-A48497BD749A","13.1-58.32",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":164,"VersionEndExcluding":165,"VersionEndIncluding":26},"6484AA47-81F8-4EE6-9F33-96DEFE2F66E1","14.1","14.1-43.56",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":153,"VersionEndExcluding":161,"VersionEndIncluding":26},"2C86D66F-888F-4519-B700-9ADC4EE6913C",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":164,"VersionEndExcluding":165,"VersionEndIncluding":26},"D4E61FAA-9EAB-4F9B-887F-C5DC0DA0C633",[],[172,179,186,192],{"id":173,"eventType":174,"eventTime":175,"details":176,"label":177,"color":178},"85f17bbf-e7a4-47a1-b485-ce92d3779a79","NEW_NVD","2025-06-19T09:32:50.622855+00:00","New CVE added to NVD","Published to NVD","blue",{"id":180,"eventType":181,"eventTime":182,"details":183,"label":184,"color":185},"ebc97a0d-eb48-4424-be0a-286d3b2b6095","NEW_CISA","2025-07-11T04:00:57.039769+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":187,"eventType":188,"eventTime":189,"details":190,"label":191,"color":185},"645b1ec5-7dd9-499a-a0a0-eaec71891b79","HIGH_EPSS_DELTA","2025-07-12T04:04:11.240582+00:00","Daily EPSS score increased by 0.468 on 2025-06-19","EPSS Score Increased",{"id":193,"eventType":194,"eventTime":195,"details":196,"label":197,"color":198},"5f80ced3-18dc-47c4-b61c-839a8bb8e157","LOW_EPSS_DELTA","2025-07-13T04:03:57.392362+00:00","Daily EPSS score decreased by 0.331 on 2025-06-19","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":200,"version":201},1793196408097,"2.0",{"score":203,"band":33,"action":204,"scoredAt":205},81,"Emergency patch","2026-10-28T07:08:37.41243+00:00"]