Topic: patch urgency

July 12, 2025

CISA Urges Immediate Patch for Exploited Citrix Bleed 2 Vulnerability

Federal agencies and businesses using Citrix NetScaler systems must urgently patch **CVE-2025-5777** after CISA confirmed active attacks, issuing a strict 24-hour deadline for remediation. The vulnerability affects **NetScaler ADC and Gateway devices** running outdated versions, allowing unauthor...

Urgent: Patch Citrix Bleed 2 NetScaler flaw as exploits go public

A critical Citrix NetScaler vulnerability (CVE-2025-5777) allows attackers to steal session tokens by exploiting malformed login requests to dump memory contents, similar to last year's CitrixBleed flaw. The flaw arises from improper use of the snprintf function, leaking ~127 bytes of memory per ...

Critical Roundcube Webmail Exploit Sold as Tech Details Leak

A critical vulnerability (CVE-2025-49113) in Roundcube webmail software is being actively exploited, allowing remote code execution after authentication, with a severity rating of 9.9/10. Hackers reverse-engineered the patch and are selling exploits online, targeting Roundcube’s widespread use in...