On June 17, 2025, Citrix disclosed CVE-2025-5777, a critical memory leak vulnerability dubbed “CitrixBleed 2.”
This flaw affects NetScaler ADC and NetScaler Gateway devices configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual servers. Impacted versions include:
https://cyberpress.org/attackers-exfiltrate-127-bytes/