ACTIEF MISBRUIKT
CVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
| Leverancier | Citrix |
|---|---|
| Product | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 3 nov 2021 |
| CISA-deadline (Amerikaanse overheid) | 3 mei 2022 |
| Zwakte (CWE) | CWE-284 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.
BRONNEN
Andere lekken bij Citrix
- CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
- CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.