---
id: "CVE-2020-8193"
kind: "vulnerability"
aliases: ["CVE-2020-8193"]
title: "Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability"
severity: "high"
cvss: 6.5
epss: 0.88269
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["citrix", "exploited", "infrastructure", "netscaler", "self-hosted"]
not_affected_if: ["managed-hosting", "no-nsip-exposure"]
published_at: "2020-07-10T16:15:12+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8193", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8193", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8193", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Citrix ADC, Gateway and SD-WAN WANOP appliances have an authorization bypass that lets an unauthenticated attacker reach certain protected URL endpoints. The attacker needs access to the NetScaler IP (NSIP) management interface, and the flaw is confirmed exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance affected ? fixed ?

## Fix

Apply the Citrix update for your appliance per vendor instructions (CISA KEV requirement); exact fixed versions are unknown from the sources.
Restrict NSIP management access to trusted networks.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8193
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2020-8193
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2020-8193

## From the sources

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_