Exposed services · NetScaler Gateway

Is my Citrix NetScaler Gateway a risk?

It can be.

Last read from the sources at the foot of this page.

Check my firm Read the steps
01

What is NetScaler Gateway?

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability 2025-07-10 Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

NetScaler Gateway gives staff remote access to office apps and desktops through a sign-in page on the internet.

02

Why does it matter?

Organizations should be aware that patching does not necessarily remove access to their system from threat actors who compromised the device while it was still vulnerable.

CISA added the flaw to its catalog of exploited flaws on 10 July 2025. CISA says it affects NetScaler set up as a Gateway, including VPN, ICA Proxy and RDP Proxy, or as an AAA virtual server.

03

What do I do about it?

  1. Install Citrix's fixed NetScaler build.
  2. Replace NetScaler versions 12.1 and 13.0, which no longer get fixes.
  3. Look for signs of past access, as the Cyber Centre recommends.
Sources

Where does this come from?

Related
05 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy