CVE-2022-27509: Citrix Application Delivery Controller Firmware

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Unauthenticated redirection to a malicious website

Affected products

• Citrix Application Delivery Controller Firmware: from 12.1, before 12.1-65.15 (fixed in 12.1-65.15); from 13.0, before 13.0-86.17 (fixed in 13.0-86.17); from 13.1, before 13.1-24.38 (fixed in 13.1-24.38); from 12.1, before 12.1-55.282 (fixed in 12.1-55.282)
• Citrix Gateway: from 12.1, before 12.1-65.15 (fixed in 12.1-65.15); from 13.0, before 13.0-86.17 (fixed in 13.0-86.17); from 13.1, before 13.1-24.38 (fixed in 13.1-24.38)

Published 2022-07-28. Last modified 2026-06-17.