Unrated severityCISA KEVNVD Advisory· Published Jun 25, 2025· Updated Feb 26, 2026

Memory overflow vulnerability leading to unintended control flow and Denial of Service

CVE-2025-6543

Description

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Affected products

Netscaler/ADCllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 14.1
Citrix Systems/Access Gatewayllm-fuzzy
NetScaler/Gatewayv5
Range: 14.1

Patches

Vulnerability mechanics

References

support.citrix.com/support-home/kbsearch/articlemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000