CVE-2022-27518
Citrix Application Delivery Controller (ADC) and Gateway
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
What it is
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citr
- nvd.nist.gov/vuln/detail/CVE-2022-27518
Description and required action as published by CISA. Full record at NVD.
Other Citrix entries on the list
- NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88779 · Oct 4, 2026
- NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88772 · Sep 27, 2026
- NetScaler Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88771 · Sep 27, 2026
- NetScaler Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-19490 · Sep 9, 2026
- NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-8452 · Aug 26, 2026
- NetScaler Citrix NetScaler Out-of-Bounds Read Vulnerability CVE-2026-3055 · Mar 30, 2026