CVE-2025-5777

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2025-07-10, due 2025-07-11

Exploitation

No report

Public exploits

26 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress09 Jul, 14:00

  CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntress

  Huntress has observed a series of strikingly similar intrusions beginning with CitrixBleed 2 exploitation, employing novel local privilege escalation techniques, and ending in Dragonforce ransomware.

  ↗huntress.com/blog/citrixbleed-2-dragonforce-ran…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:41poc publishedpoc-in-github
2. 24 Sept, 12:20poc publishedpoc-in-github
3. 24 Sept, 11:57poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev