Live › vulnerability › CVE-2022-27518
Go to dashboardCitrix ADC and Gateway appliances configured with SAML SP or IdP have an authentication bypass flaw. An unauthenticated attacker can run code as administrator on the appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix Application Delivery Controller (ADC) and Gateway | vendor | – | – |
| citrix application delivery controller firmware | vendor | >= 12.1, < 12.1-55.291 | 12.1-55.291 |
| citrix application delivery controller firmware | vendor | >= 12.1, < 12.1-65.25 | 12.1-65.25 |
| citrix application delivery controller firmware | vendor | >= 13.0, < 13.0-58.32 | 13.0-58.32 |
| citrix gateway firmware | vendor | >= 12.1, < 12.1-65.25 | 12.1-65.25 |
| citrix gateway firmware | vendor | >= 13.0, < 13.0-58.32 | 13.0-58.32 |
Check whether the appliance is configured as a SAML SP or IdP (unknown which setting or file the sources name).
Apply the Citrix update for CVE-2022-27518 per vendor instructions (specific fixed versions unknown from sources).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2022-27518")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.