CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2019-19781

CVSS 9.8v3.1pub. 2019-12-27upd. 2026-08-12

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Citrix Application Delivery Controller
HW
Citrix
all versions
Citrix Application Delivery Controller Firmware
OS
Citrix
10.511.112.012.113.0
Citrix Gateway
HW
Citrix
all versions
Citrix Gateway Firmware
OS
Citrix
13.0
Citrix Netscaler Gateway
HW
Citrix
all versions
Citrix Netscaler Gateway Firmware
OS
Citrix
10.511.112.012.1

CISA KEV — detailsi

Vendori: Citrix ↗
Producti: Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Added to KEVi: November 3, 2021
Remediation deadline (US Federal)i: May 3, 2022(overdue)
Ransomwarei: Active ransomware campaigns exploit this vulnerability

🔧Advisory Citrix↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.

🔴