Critical flaws discovered in Citrix software offerings
In a recent development, several versions of the NetScaler ADC and NetScaler Gateway products have been identified as having potential vulnerabilities. These affected versions are as follows:
- NetScaler ADC 13.1-FIPS and NDcPP BEFORE 13.1-37.235-FIPS and NDcPP
- NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-43.56
- NetScaler ADC 12.1-FIPS BEFORE 12.1-55.328-FIPS
- NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-58.32
It is crucial for users of these affected versions to update their software promptly to avoid potential risks.
The vulnerability in question, CVE-2025-6543, has been found to primarily affect critical Dutch institutions and companies. These organisations have been targeted by cyberattacks that exploit this flaw. In response, the Dutch National Cyber Security Centre (NCSC-NL) has issued warnings and strongly urged these organisations to follow the necessary security updates and patches for these Citrix products.
Users worldwide are advised to check their current versions of NetScaler ADC and NetScaler Gateway products and apply the necessary updates to ensure the security of their systems. By doing so, they can help protect their organisations from potential cyber threats.
Stay vigilant and keep your systems updated for a safer digital environment.