KEV Entry

CVE-2025-6543

Known Exploited Vulnerability Entry ENISA

Entry Details
Confirmed Exploited

CVE-2025-6543

2025-07-18 02:00 CEST


Timestamps

2025-07-18

2025-07-18


Scope

Affected: Citrix / NetScaler ADC and NetScaler Gateway | Description: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. | Patched since: 2025/06/25 | Exploitation type: unknown | Origin source: CNW


References
  • {'id': 'CVE-2025-6543', 'url': 'https://www.cve.org/CVERecord?id=CVE-2025-6543'}
  • {'id': 'EUVD-2025-19085', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19085'}

ffa1e340-1807-47eb-8cd0-bbc3b5821992

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-10-02 08:52 CEST

2026-10-02 08:52 CEST

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [],
  "dateReported": "2025/07/18",
  "euvd": "EUVD-2025-19085",
  "exploitationType": [
    "unknown"
  ],
  "notes": "",
  "originSource": "CNW",
  "patchedSince": "2025/06/25",
  "product": "NetScaler ADC and NetScaler Gateway",
  "threatActorsExploiting": [],
  "vendorProject": "Citrix",
  "vulnerabilityName": ""
}
-