Bleeping Computer

Citrix Bleed 2 exploited weeks before PoCs as Citrix denied attacks

A critical Citrix NetScaler vulnerability, tracked as CVE-2025-5777 and dubbed "CitrixBleed 2," was actively exploited nearly two weeks before proof-of-concept (PoC) exploits were made public, despite ...
TechCrunch

CISA warns hackers are actively exploiting critical ‘Citrix Bleed 2’ security flaw

U.S. cybersecurity agency CISA says hackers are actively exploiting a critical-rated security flaw in a widely used Citrix product, and has given other federal government departments just one day to ...
Bleeping Computer

Citrix Bleed 2 flaw now believed to be exploited in attacks

A critical NetScaler ADC and Gateway vulnerability dubbed "Citrix Bleed 2" (CVE-2025-5777) is now likely exploited in attacks, according to cybersecurity firm ReliaQuest, seeing an increase in ...
Ars Technica

Critical CitrixBleed 2 vulnerability has been under active exploit for weeks

A critical vulnerability allowing hackers to bypass multifactor authentication in network management devices made by Citrix has been actively exploited for more than a month, researchers said. The ...
Computer Weekly

Citrix Bleed 2 under active attack, reports suggest

A freshly discovered vulnerability in the perennially under-fire Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway appliances, which has been compared to 2023’s Citrix Bleed ...
heise online

Citrix Bleed 2: Critical Netscaler security gap exploited for almost a month

The security vulnerability nicknamed “Citrix Bleed 2” has apparently been known to attackers for longer than initially assumed. This was discovered by a provider of attack detection solutions. Using ...
TechRadar

CitrixBleed 2 flaws are officially here - so get patching or leave your systems at risk

Citrix disclosed patching a critical-severity bug in Citrix NetScaler ADC and Gateway instances Independent researchers dub it "CitrixBleed 2" due to its similiarities to the 2023 flaw Users are ...
TechRadar

CitrixBleed 2 exploits are now in the wild, so patch now

CitrixBleed 2 was discovered in late June 2025 The majority of instances have not yet been patched Security researchers are warning the bug is likely being exploited already CitrixBleed 2, a ...