CitrixBleed 2 — Citrix NetScaler Memory Leak (CVE-2025-5777)

[ADMIN]

Critical memory leak vulnerability in Citrix NetScaler ADC/Gateway. Sending malformed POST request with login parameter without value causes server to return ~127 bytes of uninitialized stack memory, including session tokens, enabling MFA bypass and active session hijacking.

Research:

CitrixBleed 2: Electric BoogalooâââCVE-2025â5777

Remember CitrixBleed, the vulnerability where a simple HTTP request would dump memory, revealing session tokens? Itâs back.

doublepulsar.com

Source:

GitHub - win3zz/CVE-2025-5777: CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices

CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices - win3zz/CVE-2025-5777

github.com