Vulnerability in Netscaler Adc
CVE-2025-8424
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Published · last modified .
EPSS exploit prediction
EPSS: 0.028 (86.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 86.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.028 · newest: 0.028 · change: 0.000
Affected products
- Netscaler Adc — versions 14.1, 13.1, 13.1 FIPS and NDcPP
- Netscaler Gateway — versions 14.1, 13.1, 13.1 FIPS and NDcPP
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-8424?
- CVE-2025-8424 is a vulnerability in Netscaler Adc, classified under Improper Validation of Specified Quantity in Input. Published 2025-08-26.
- Is CVE-2025-8424 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.