CVE-2010-4566

no score yetEPSS 28%

citrix access gateway: no CVSS score yet. EPSS 28% chance of exploitation in the next 30 days.

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.

EPSS: 28% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2011-01-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

citrix:access_gateway

References

http://securityreason.com/securityalert/8119
http://support.citrix.com/article/CTX127613
http://www.exploit-db.com/exploits/16916
http://www.osvdb.org/70099
http://www.securitytracker.com/id?1024893

Check your stack JSON