https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-22771.htmlhttps://patchthecve.com/cve/CVE-2026-22771.htmlWed, 15 Jul 2026 02:18:35 +0000HIGH 8.8: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate https://patchthecve.com/cve/CVE-2025-24030.htmlhttps://patchthecve.com/cve/CVE-2025-24030.htmlWed, 17 Jun 2026 08:57:55 +0000HIGH 7.1: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior tohttps://patchthecve.com/cve/CVE-2023-24488.htmlhttps://patchthecve.com/cve/CVE-2023-24488.htmlWed, 17 Jun 2026 05:39:22 +0000MEDIUM 6.1: Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scriptinghttps://patchthecve.com/cve/CVE-2023-24487.htmlhttps://patchthecve.com/cve/CVE-2023-24487.htmlWed, 17 Jun 2026 05:39:22 +0000MEDIUM 6.3: Arbitrary file read in Citrix ADC and Citrix Gateway https://patchthecve.com/cve/CVE-2022-27508.htmlhttps://patchthecve.com/cve/CVE-2022-27508.htmlWed, 17 Jun 2026 04:37:08 +0000HIGH 7.5: Unauthenticated denial of servicehttps://patchthecve.com/cve/CVE-2022-27507.htmlhttps://patchthecve.com/cve/CVE-2022-27507.htmlWed, 17 Jun 2026 04:37:08 +0000MEDIUM 6.5: Authenticated denial of servicehttps://patchthecve.com/cve/CVE-2019-18177.htmlhttps://patchthecve.com/cve/CVE-2019-18177.htmlWed, 17 Jun 2026 02:24:24 +0000MEDIUM 6.5: In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.https://patchthecve.com/cve/CVE-2022-27516.htmlhttps://patchthecve.com/cve/CVE-2022-27516.htmlWed, 17 Jun 2026 04:37:09 +0000MEDIUM 5.3: User login brute force protection functionality bypass https://patchthecve.com/cve/CVE-2022-27513.htmlhttps://patchthecve.com/cve/CVE-2022-27513.htmlWed, 17 Jun 2026 04:37:09 +0000HIGH 8.3: Remote desktop takeover via phishing https://patchthecve.com/cve/CVE-2022-27510.htmlhttps://patchthecve.com/cve/CVE-2022-27510.htmlWed, 17 Jun 2026 04:37:09 +0000CRITICAL 9.8: Unauthorized access to Gateway user capabilities https://patchthecve.com/cve/CVE-2022-38368.htmlhttps://patchthecve.com/cve/CVE-2022-38368.htmlWed, 17 Jun 2026 04:56:28 +0000HIGH 8.8: An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.https://patchthecve.com/cve/CVE-2022-27509.htmlhttps://patchthecve.com/cve/CVE-2022-27509.htmlWed, 17 Jun 2026 04:37:09 +0000MEDIUM 6.1: Unauthenticated redirection to a malicious websitehttps://patchthecve.com/cve/CVE-2022-31805.htmlhttps://patchthecve.com/cve/CVE-2022-31805.htmlWed, 17 Jun 2026 04:46:20 +0000HIGH 7.5: In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.https://patchthecve.com/cve/CVE-2022-31804.htmlhttps://patchthecve.com/cve/CVE-2022-31804.htmlWed, 17 Jun 2026 04:46:20 +0000HIGH 7.5: The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.https://patchthecve.com/cve/CVE-2022-31803.htmlhttps://patchthecve.com/cve/CVE-2022-31803.htmlWed, 17 Jun 2026 04:46:20 +0000MEDIUM 5.3: In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections https://patchthecve.com/cve/CVE-2022-31802.htmlhttps://patchthecve.com/cve/CVE-2022-31802.htmlWed, 17 Jun 2026 04:46:20 +0000CRITICAL 9.8: In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway phttps://patchthecve.com/cve/CVE-2021-22927.htmlhttps://patchthecve.com/cve/CVE-2021-22927.htmlWed, 17 Jun 2026 03:38:02 +0000HIGH 8.1: A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.https://patchthecve.com/cve/CVE-2021-22920.htmlhttps://patchthecve.com/cve/CVE-2021-22920.htmlWed, 17 Jun 2026 03:38:01 +0000MEDIUM 6.5: A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a https://patchthecve.com/cve/CVE-2021-22919.htmlhttps://patchthecve.com/cve/CVE-2021-22919.htmlWed, 17 Jun 2026 03:38:01 +0000HIGH 7.5: A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk shttps://patchthecve.com/cve/CVE-2021-36764.htmlhttps://patchthecve.com/cve/CVE-2021-36764.htmlWed, 17 Jun 2026 03:59:07 +0000HIGH 7.5: In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.https://patchthecve.com/cve/CVE-2020-8300.htmlhttps://patchthecve.com/cve/CVE-2020-8300.htmlWed, 17 Jun 2026 03:26:14 +0000MEDIUM 6.5: Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must bhttps://patchthecve.com/cve/CVE-2020-8299.htmlhttps://patchthecve.com/cve/CVE-2020-8299.htmlWed, 17 Jun 2026 03:26:14 +0000MEDIUM 6.5: Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-ohttps://patchthecve.com/cve/CVE-2020-8247.htmlhttps://patchthecve.com/cve/CVE-2020-8247.htmlWed, 17 Jun 2026 03:26:07 +0000HIGH 8.8: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-Whttps://patchthecve.com/cve/CVE-2020-8246.htmlhttps://patchthecve.com/cve/CVE-2020-8246.htmlWed, 17 Jun 2026 03:26:07 +0000HIGH 7.5: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-Whttps://patchthecve.com/cve/CVE-2020-8245.htmlhttps://patchthecve.com/cve/CVE-2020-8245.htmlWed, 17 Jun 2026 03:26:07 +0000MEDIUM 6.1: Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.https://patchthecve.com/cve/CVE-2020-12714.htmlhttps://patchthecve.com/cve/CVE-2020-12714.htmlWed, 17 Jun 2026 02:52:10 +0000MEDIUM 5.9: An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger Virtual Appliances 1.1.1 through 3.1.1-0. A Diffie-Hellman parameter of insufficient size could allow man-https://patchthecve.com/cve/CVE-2020-12713.htmlhttps://patchthecve.com/cve/CVE-2020-12713.htmlWed, 17 Jun 2026 02:52:10 +0000HIGH 7.2: An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root accohttps://patchthecve.com/cve/CVE-2020-13417.htmlhttps://patchthecve.com/cve/CVE-2020-13417.htmlWed, 17 Jun 2026 02:53:06 +0000CRITICAL 9.8: An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.https://patchthecve.com/cve/CVE-2020-13414.htmlhttps://patchthecve.com/cve/CVE-2020-13414.htmlWed, 17 Jun 2026 02:53:06 +0000HIGH 7.5: An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.https://patchthecve.com/cve/CVE-2020-11543.htmlhttps://patchthecve.com/cve/CVE-2020-11543.htmlWed, 17 Jun 2026 02:50:22 +0000CRITICAL 9.8: OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This issue has been resolved in OpsRamp Gateway firmware version 7.0.0 where an administrator and a system user accounts are the only available user accounts for the gatew