ACTIVELY EXPLOITED
CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
| Vendor | Citrix |
|---|---|
| Product | Application Delivery Controller (ADC) and Gateway |
| Actively exploited | Yes |
| Added to CISA KEV | 13 Dec 2022 |
| CISA federal deadline | 3 Jan 2023 |
| Weakness (CWE) | CWE-664 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
SOURCES
Other Citrix flaws
- CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
- CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.