Description
12月13日，NSA发布安全公告披露CVE-2022-27518 Citrix ADC和Citrix Gateway远程代码执行漏洞。当 Citrix ADC和Citrix Gateway配置为安全断言标记语言(SAML)服务提供商(SP)或SAML身份提供商(IdP)时，攻击者可利用此漏洞执行任意命令。
Citrix ADC & Citrix Gateway 存在远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/Citrix-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2019-19781.md
https://zhuanlan.zhihu.com/p/648828632
https://blog.csdn.net/jayjay___/article/details/136110191
https://www.ctfiot.com/127565.html
https://www.secrss.com/articles/50030
https://nic.seu.edu.cn/info/1047/1339.htm
https://www.cnblogs.com/panisme/p/12542721.html
https://blog.nsfocus.net/citrix-adccitrix-gatewaycve-2023-3519/
https://starmap.dbappsecurity.com.cn/info/11990
https://www.tenable.com/blog/cve-2025-7775-citrix-netscaler-adc-and-netscaler-gateway-zero-day-remote-code-execution
https://bishopfox.com/blog/citrix-adc-gateway-rce-cve-2023-3519