CVE‑2025‑6543 – NetScaler ADC Zero‑Day Exploited
CVE‑2025‑6543: Active Zero‑Day in Citrix NetScaler ADC/Gateway
CVE‑2025‑6543 is a zero‑day vulnerability in Citrix NetScaler ADC and Gateway appliances. Rapid7 confirmed exploitation prior to the public patch release on June 26, 2025.
CVSS v3.1: Not yet available (zero‑day)
Exploit Status: Demonstrated in the wild
Affected Systems: NetScaler ADC/Gateway versions with default configs
Why It Matters
NetScaler is widely deployed in enterprise router and access gateway roles. This zero‑day allows attackers to execute code remotely with elevated privileges — often without authentication.
Recommended Actions
Apply Citrix’s emergency patch immediately.
Review appliance configurations, especially access rules and VPN settings.
Watch for anomalous admin logs or configuration changes post‑exploit.
Key Takeaway
Network appliance zero‑days are especially dangerous — they’re exposed and trusted. Rapid patch deployment and continuous monitoring are non‑negotiable.
