CVE-2022-27518
Unauthenticated remote arbitrary code execution
CVE-2022-27518 is a critical vulnerability (CVSS 9.8) in Citrix Application Delivery Controller (adc) And Gateway, published December 13, 2022. CISA lists it as known to be exploited, since December 13, 2022. EUVD reports exploitation since December 13, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.86%, the 94th percentile. No source names a fixed version.
- Severity
- 9.8 CriticalCVSS 3.1, CVE List
- Exploit chance
- 6.86%EPSS, 94th percentile
- Exploitation
- ExploitedCISA KEV,
- Fixed in
- No fix listedNo source names one
Description
Unauthenticated remote arbitrary code execution
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | dolby360/CVE-2022-27518_POC | 2023-01-17 |
What each source reports
CVE List Score used
Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution
- Record
CVE-2022-27518- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-664
- Updated
- 2026-11-02
EUVDEUVD-2022-32019
Unauthenticated remote arbitrary code execution
- Record
EUVD-2022-32019- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w8vh-3g88-rg95
Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution
- Record
GHSA-w8vh-3g88-rg95- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-664
- Updated
- 2026-11-02
CISA KEVNo score
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
- Record
CVE-2022-27518- Weakness
- CWE-664
- Updated
- 2026-11-02
NVD
Unauthenticated remote arbitrary code execution
- Record
CVE-2022-27518- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-664
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.