CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
Affected products
citrix: application delivery controller firmware; citrix: netscaler gateway firmware; citrix: gateway firmware; citrix: sd-wan wanop; citrix: 4000-wo; citrix: 4100-wo; citrix: 5000-wo; citrix: 5100-wo
References5
- support.citrix.com/article/CTX276688 Vendor Advisory
- support.citrix.com/article/CTX276688 Vendor Advisory
- packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local… ExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=… US Government Resource
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS — exploit probability
- 88% percentile: 100 · as of 2 November 2026
- CWE
- CWE-284CWE-287