Back to CVE Browser

CVE-2022-27518

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-12-13

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Unauthenticated remote arbitrary code execution

Affected Platforms (CPE)

💻

Citrix

Application Delivery Controller Firmware

>= 12.1 and < 12.1-55.291>= 12.1 and < 12.1-65.25>= 13.0 and < 13.0-58.32

💻

Citrix

Gateway Firmware

>= 12.1 and < 12.1-65.25>= 13.0 and < 13.0-58.32

References & Advisories

🔗 https://support.citrix.com/article/CTX474995

🔗 https://support.citrix.com/article/CTX474995

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27518

Related Vulnerabilities

CVE-2026-579164.6

proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary ce...

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-400001.8

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files...

CVE-2026-175277.7

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI...