Known Vulnerabilities for Gateway by Citrix
Listed below are 10 of the newest known vulnerabilities associated with "Gateway" by "Citrix".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Citrix Gateway
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57635 json | Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56695 json | OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote sende... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-56048 json | Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56029 json | Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56023 json | Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-55603 json | http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's d... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-55249 json | @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents. In 1.0.... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-54917 json | SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 AP... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-54761 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Trae... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-54324 json | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0,... | Not Provided | 2026-06-23 | 2026-06-25 |