ACTIEF MISBRUIKT
CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
| Leverancier | Citrix |
|---|---|
| Product | Application Delivery Controller (ADC) and Gateway |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 13 dec 2022 |
| CISA-deadline (Amerikaanse overheid) | 3 jan 2023 |
| Zwakte (CWE) | CWE-664 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
BRONNEN
Andere lekken bij Citrix
- CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
- CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.