CVE-2022-27510

—

CVSS 3.1

9.8 critical

EPSS

1%p63

Published

Nov 8, 2022 (Nov 8, 2022)

Modified

Jun 17, 2026

Description

Unauthorized access to Gateway user capabilities

Vendors: citrix
Products: gateway, application delivery controller firmware
Weakness: CWE-288, CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news5 stories

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+2 CVEs

60

Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities

The Hacker NewsDec 30, 05:05 UTC · Dec 30, 2022Vulnerability in the wildCVE-2022-27510 CVE-2022-27518

60

Thousands of Citrix servers still vulnerable to CVE-2022-27510 and CVE-2022

Security AffairsDec 29, 14:36 UTC · Dec 29, 2022Vulnerability in the wildCVE-2022-27510 CVE-2022-27518

60

Citrix Issues Patches for Critical Flaw Affecting ADC and Gateway Products

The Hacker NewsNov 10, 12:22 UTC · Nov 10, 2022Vulnerability CVE-2022-27510 CVE-2022-27513 CVE-2022-27516

60

Citrix ADC and Citrix Gateway are affected by a critical auth bypass

Security AffairsNov 8, 21:53 UTC · Nov 8, 2022Vulnerability CVE-2022-27510 CVE-2022-27513 CVE-2022-27516

60