CVE Watch—

CVE-2020-8193

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

CVSS

—

No CVSS

EPSS

88.4%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

88.4%EPSS · 30 days88.4%

2026-06-302026-07-16

KEV catalog record

Product

Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

Vulnerability

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8193

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-19781—

100.0%

KEV—80Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability—CVE-2020-8195—

98.2%

KEV—79Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—CVE-2020-8196—

97.8%

KEV—79Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—