{"id":"CVE-2020-8193","kind":"vulnerability","aliases":["CVE-2020-8193"],"related":[],"title":"Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","description":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Citrix ADC, Gateway and SD-WAN WANOP appliances have an authorization bypass that lets an unauthenticated attacker reach certain protected URL endpoints. The attacker needs access to the NetScaler IP (NSIP) management interface, and the flaw is confirmed exploited in the wild.","severity":"high","cvss":6.5,"epss":0.88269,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["citrix","exploited","infrastructure","netscaler","self-hosted"],"not_affected_if":["managed-hosting","no-nsip-exposure"],"how_to_check":null,"fix":"Apply the Citrix update for your appliance per vendor instructions (CISA KEV requirement); exact fixed versions are unknown from the sources.\nRestrict NSIP management access to trusted networks.","status":"open","published_at":"2020-07-10T16:15:12+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:43:35+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:43:35Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Citrix update for your appliance per vendor instructions (CISA KEV requirement); exact fixed versions are unknown from the sources.\nRestrict NSIP management access to trusted networks.","reach":"network","impact":"high","summary":"Citrix ADC, Gateway and SD-WAN WANOP appliances have an authorization bypass that lets an unauthenticated attacker reach certain protected URL endpoints. The attacker needs access to the NetScaler IP (NSIP) management interface, and the flaw is confirmed exploited in the wild.","category":"infrastructure","who_cares":["citrix","netscaler","self-hosted"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated attacker reaches protected appliance endpoints and can take administrative actions.","analyst_note":"Find the affected and fixed Citrix ADC/Gateway/SD-WAN versions and the vendor advisory (CTX276688) to fill how_to_check and fix.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["managed-hosting","no-nsip-exposure"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000512,"input_tokens":2964,"output_tokens":432,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the affected and fixed Citrix ADC/Gateway/SD-WAN versions and the vendor advisory (CTX276688) to fill how_to_check and fix.","search":"'-2020':26A,29A '-8193':27A,30A 'access':76B,115C,124C 'action':137C 'adc':5A,14A,35A,51B,94C 'allow':113C 'and':37A 'appli':138C 'applianc':12A,21A,58B,104C 'appliance':42A 'applic':2A 'application':32A 'attack':67B,74B,121C 'author':22A,61B,108C 'bypass':23A,62B,109C 'certain':69B,117C 'cisa':135C 'citrix':1A,13A,31A,43B,50B,93C,95C,99C 'confirm':88B 'contain':106C 'control':4A 'controller':34A 'cve':25A,28A 'deliveri':3A 'delivery':33A 'endpoint':72B,119C 'exploit':44B,89B,134C 'flaw':86B 'gateway':6A,15A,36A,52B,96C 'host':49B 'infrastructur':45B 'instruct':142C 'interfac':83B 'ip':80B,128C 'let':64B 'manag':82B 'may':112C 'model':105C 'multipl':98C 'must':122C 'need':75B 'netscal':46B,79B,127C 'nsip':81B,129C 'order':131C 'per':140C 'perform':133C 'protect':70B 'reach':68B 'requir':136C 'sd':9A,18A,39A,55B,101C 'sd-wan':8A,17A,38A,54B,100C 'self':48B 'self-host':47B 'unauthent':66B,114C 'updat':139C 'url':71B,118C 'vendor':141C 'vulner':24A,110C 'wan':10A,19A,40A,56B,102C 'wanop':11A,20A,41A,57B,103C 'wild':92B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-07-10T16:15:12+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-8193","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8193","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T11:39:17+00:00","note":null},{"source":"epss","external_id":"CVE-2020-8193","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8193","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-8193","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","severity":null,"published_at":"2020-07-10T16:15:12+00:00","modified_at":"2026-06-17T03:26:01+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}