{"uuid": "ffa1e340-1807-47eb-8cd0-bbc3b5821992", "vulnerability": {"vulnId": "CVE-2025-6543", "altId": []}, "gcve": {"origin_uuid": "cce329bf-df49-4c6e-a027-80be2e6483bd", "object_uuid": "ffa1e340-1807-47eb-8cd0-bbc3b5821992"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2025-07-18T02:00:00+02:00"}, "timestamps": {"asserted_at": "2025-07-18T00:00:00+00:00", "recorded_at": "2026-10-02T06:52:36+00:00", "first_seen_at": "2025-07-18T00:00:00+00:00"}, "scope": {"notes": "Affected: Citrix / NetScaler ADC and NetScaler Gateway | Description: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. | Patched since: 2025/06/25 | Exploitation type: unknown | Origin source: CNW"}, "evidence": [{"type": "csirt_report", "source": "enisa-cnw-kev", "signal": "successful_exploitation", "confidence": 0.75, "details": {"cwes": [], "euvd": "EUVD-2025-19085", "notes": "", "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON", "product": "NetScaler ADC and NetScaler Gateway", "dateReported": "2025/07/18", "originSource": "CNW", "patchedSince": "2025/06/25", "vendorProject": "Citrix", "exploitationType": ["unknown"], "vulnerabilityName": "", "threatActorsExploiting": []}}], "references": [{"id": "CVE-2025-6543", "url": "https://www.cve.org/CVERecord?id=CVE-2025-6543"}, {"id": "EUVD-2025-19085", "url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19085"}]}