CVE-2019-19781

Actively exploited

CISA lists CVE-2019-19781 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance.

• Apply updates per vendor instructions.

Public exploit: Cataloged public exploit.

• Rapid7 Metasploit: Citrix ADC (NetScaler) Directory Traversal RCE (2026-09-23 21:40:29.350562+00)

  Rapid7 catalogs an exploit module for this CVE. Module availability does not establish exploitation in the wild or applicability to your environment.

• Exploit-DB: Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC) (2026-09-23 21:40:27.335989+00)

  Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.

• Exploit-DB: Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit) (2026-09-23 21:40:27.335989+00)

  Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.

• Exploit-DB: Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal (2026-09-23 21:40:27.335989+00)

  Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.