NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2022-27510

CVSS 3.1: 9.8 critical
EPSS: 1%p63
Published: Nov 8, 2022 · Nov 8, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-27510 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Unauthorized access to Gateway user capabilities

Vendors: citrix

Products: gateway, application delivery controller firmware

Weakness: CWE-288, CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

5 stories

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoCExploitedCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+22 · 1 read

60

Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities

The Hacker NewsDec 30, 05:05 UTC · Dec 30, 2022VulnerabilityExploitedCVE-2022-27510 CVE-2022-275182 · 1 read

60

Thousands of Citrix servers still vulnerable to CVE-2022-27510 and CVE-2022

Security AffairsDec 29, 14:36 UTC · Dec 29, 2022VulnerabilityExploitedCVE-2022-27510 CVE-2022-275182

60

Citrix Issues Patches for Critical Flaw Affecting ADC and Gateway Products

The Hacker NewsNov 10, 12:22 UTC · Nov 10, 2022VulnerabilityCVE-2022-27510 CVE-2022-27513 CVE-2022-275162 · 1 read

60

Citrix ADC and Citrix Gateway are affected by a critical auth bypass

Security AffairsNov 8, 21:53 UTC · Nov 8, 2022VulnerabilityCVE-2022-27510 CVE-2022-27513 CVE-2022-275162 · 1 read

60