CVE-2025-5349— NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
Quick assessment
Affected
NetScaler ADC
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Citrix NetScaler ADC和Citrix NetScaler Gateway都是美国Citrix公司的产品。Citrix NetScaler ADC是一个应用程序交付和安全性平台。Citrix NetScaler Gateway是一种安全远程访问的解决方案。 Citrix NetScaler ADC和Citrix NetScaler Gateway存在安全漏洞，该漏洞源于NetScaler Management Interface访问控制不当。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-5349
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
Source: CVE Program / CVE List V5
Vulnerability Description
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5
Vulnerability Title
Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix NetScaler ADC和Citrix NetScaler Gateway都是美国Citrix公司的产品。Citrix NetScaler ADC是一个应用程序交付和安全性平台。Citrix NetScaler Gateway是一种安全远程访问的解决方案。 Citrix NetScaler ADC和Citrix NetScaler Gateway存在安全漏洞，该漏洞源于NetScaler Management Interface访问控制不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-5349
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/olimpiofreitas/CVE-2025-5349-Scanner | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-5349
请登录查看更多情报信息。
Vendor Pages for CVE-2025-5349 (1)
Same Patch Batch · NetScaler · 2025-06-17 · 3 CVEs total
| CVE-2025-5777 | 9.3 CRITICAL | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory over |
| CVE-2025-4365 | NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read |
IV. Related Vulnerabilities
Same product: ADC
-
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Executi -
CVE-2026-88779
Memory overflow vulnerability leading to Denial of Service -
CVE-2026-88778
TCP Initial Sequence Number (ISN) prediction -
CVE-2026-88777
Memory overflow vulnerability leading to unpredictable or er -
CVE-2026-88776
Memory overflow vulnerability leading to unpredictable or er
Same vendor: NetScaler
-
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Executi -
CVE-2026-88779
Memory overflow vulnerability leading to Denial of Service -
CVE-2026-19490
NetScaler ADC and NetScaler Gateway Security Bulletin for CV -
CVE-2026-19489
NetScaler ADC 安全漏洞 -
CVE-2026-13474
Denial of service via malformed HTTP/2 requests
Same weakness: CWE-1284
-
CVE-2026-107434
WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerabili -
CVE-2026-107565
Luksmeta: incomplete gap-boundary and overlap checks in luks -
CVE-2026-97275
WordPress BuildKit – Product Builder for WooCommerce – Custo -
CVE-2026-103351
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1 -
CVE-2026-103065
WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution v
V. Comments for CVE-2025-5349
No comments yet