CVE-2022-27518
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
1/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
CISA Known Exploited Vulnerability
Vendor / Product
Citrix — Application Delivery Controller (ADC) and Gateway
Date Added
2022-12-13
Remediation Due
2023-01-03
https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/; https://nvd.nist.gov/vuln/detail/CVE-2022-27518