Skip to content
OpenAdvisories
High · 8.7 CVE-2025-8424 EUVD-2025-25868GHSA-4gr3-wh64-r647

Improper access control on the NetScaler Management Interface

Published Aug 26, 2025 · Updated Feb 26, 2026 · Assigned by Citrix

Description

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

Affected products

VendorProductAffectedFixed
NetScaler ADC 14.1 – < 47.48, 13.1 – < 59.22, 13.1 FIPS and NDcPP – < 37.241, 12.1 FIPS and NDcPP – < 55.330 47.48
NetScaler Gateway 14.1 – < 47.48, 13.1 – < 59.22, 13.1 FIPS and NDcPP – < 37.241, 12.1 FIPS and NDcPP – < 55.330 47.48

Advisories 2

References