References https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2025_12101 https://nvd.nist.gov/vuln/detail/CVE-2025-12101 https://www.netscaler.com/blog/news/medium-severity-security-update-announced-for-netscaler-gateway-and-netscaler/ https://www.secpod.com/blog/relaystate-ruse-exploiting-reflected-xss-in-citrix-netscaler/ https://www.sentinelone.com/vulnerability-database/cve-2025-12101/ https://support.citrix.com/external/article/CTX695486/netscaler-adc-and-netscaler-gateway-secu.html https://github.com/advisories/GHSA-jcjw-279r-m433 https://cvefeed.io/vuln/detail/CVE-2025-12101 https://avd.aliyun.com/detail?id=AVD-2025-12101 https://www.nsfocus.net/vulndb/133364
Related Vulnerabilities云连ERP管理系统 /gateway/download!download.action 代码执行漏洞Citrix-NetScaler /saml/login 信息泄露漏洞(CVE-2026-8451)PoCCVE-2023-7327: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File ReadCitrix NetScaler ADC SAML IDP /wsfed/passive 信息泄露漏洞(CVE-2026-3055)PoCapache-casbin-mcp-gateway-default-login: Apache Casbin MCP Gateway - Default LoginPoCCVE-2026-3055: Citrix NetScaler SAML IDP - Memory OverreadPoCsanhuismg-radius-rce: Synway SMG Gateway 9-2radius.php - Remote Command ExecutionCitrix NetScaler 内存越界读取漏洞PoCremote-spark-gateway-config: Remote Spark Gateway Configuration/Credentials - ExposureOpenClaw Gateway 存在未授权访问漏洞Moltbot(Clawdbot)Gateways 未授权访问漏洞PoCambassador-api-diagnostics-exposure: Ambassador API Gateway Diagnostics - Exposure