Firetruck

CVE-2022-27518

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Citrix Gateway, Citrix ADCCitrix / Citrix Gateway, Citrix ADC12.1affected
Citrix Gateway, Citrix ADCCitrix / Citrix Gateway, Citrix ADC12.1 FIPs, NDcPPaffected
Citrix Gateway, Citrix ADCCitrix / Citrix Gateway, Citrix ADC13.0affected