References https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 https://nvd.nist.gov/vuln/detail/CVE-2025-5777 https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777/ https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/ https://github.com/win3zz/CVE-2025-5777 https://www.cve.org/cverecord?id=CVE-2025-5777 https://horizon3.ai/attack-research/vulnerabilities/cve-2025-5777/ https://www.exploit-db.com/exploits/52401 https://support.citrix.com/external/article/CTX693420/netscaler-adc-and-netscaler-gateway-secu.html
Related VulnerabilitiesCitrix-NetScaler /saml/login 信息泄露漏洞(CVE-2026-8451)Citrix NetScaler ADC SAML IDP /wsfed/passive 信息泄露漏洞(CVE-2026-3055)PoCCVE-2026-3055: Citrix NetScaler SAML IDP - Memory OverreadCitrix NetScaler 内存越界读取漏洞PoCCVE-2019-13608: Citrix StoreFront Server - XML External Entity(CVE-2025-12101)NetScaler ADC和Gateway配置为网关或AAA虚拟服务器时的跨站脚本漏洞CVE-2019-19781: Citrix Application Delivery Controller (ADC) and Gateway Directory Traversal.PoCCVE-2025-5777: Citrix NetScaler Memory Disclosure - CitrixBleed 2PoCCVE-2019-12985: Citrix SD-WAN Center - Remote Command InjectionPoCCVE-2019-12986: Citrix SD-WAN Center - Remote Command InjectionPoCCVE-2019-12987: Citrix SD-WAN Center - Remote Command InjectionPoCCVE-2019-12988: Citrix SD-WAN Center - Remote Command InjectionPoCCVE-2019-12990: Citrix SD-WAN Center - Local File Inclusion