NVD disclosure day

Published threat advisories for June 17, 2025

CVE-2025-4404

FreeIPA Host to Domain Privilege Escalation via Kerberos Canonical Name Collision

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A FreeIPA vulnerability allows an authenticated user to escalate privileges, potentially impersonating the domain administrator and gaining unauthorized access to sensitive data.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2025-5777

Citrix NetScaler Gateway Memory Leak Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Citrix NetScaler devices, when configured as Gateways or AAA virtual servers, are susceptible to a memory overread vulnerability. This could allow unauthorized access to sensitive information, posing a business risk. This vulnerability is actively exploited, making remediation a priority.

NVD modified: NVD date unavailable • CISA KEV