TLP:CLEARKNOWN EXPLOITEDAnalyzedPublished 27 Dec 2019 · Updated 12 Aug 2026
CVE-2019-19781
9.8CriticalCVSS 3.1
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
- Affected software
- Citrix Application Delivery Controller Firmware
- Versions
- Not stated
- Weakness
- CWE-22 · Path traversal
- Assigned by
- MITRE
- Known exploited since
- 3 Nov 2021 (CISA KEV)
- NVD status
- Analyzed
ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2019-19781 CVE.org https://www.cve.org/CVERecord?id=CVE-2019-19781 Vendor Advisory https://support.citrix.com/article/CTX267027Vendor Advisory https://support.citrix.com/article/CTX267027Broken Link https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/Third Party Advisory https://forms.gle/eDf3DXZAv96oosfj6Broken Link https://twitter.com/bad_packets/status/1215431625766424576