CVE-2025-6543Vulnerability
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Tenable · last reported
Last reported 27 days ago
CISA KEVAdded 30 Jun 2025
Fix due 21 Jul 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 21 Jul 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS10.6%
higher than 95% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 95% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities“CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read vulnerability (“CitrixBleed 2”)2025-07-10KnownCVE-2025-5777, CVE-2025-6543: Frequently Asked Questions About CitrixBleed 2 and Citrix NetScaler Exploitation”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-19489, CVE-2026-19490, CVE-2023-6549
Thanks — we review every report.