CVE-2020-10111: Citrix Gateway Firmware

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization

Affected products

• Citrix Gateway Firmware: version 11.1 only; version 12.0 only; version 12.1 only

Published 2020-03-06. Last modified 2026-06-17.