CVE intelligenceCISA KEVRansomware use

CVE-2019-19781

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Published Dec 27, 2019Sources checked Sep 12, 2026

9.8CRITICALCVSS out of 10

What this means

Actively exploited

CISA lists CVE-2019-19781 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance.

Apply updates per vendor instructions.

CISA KEVListedObserved exploitation

EPSS100.0%Estimated 30-day exploitation probability

Ransomware useReported by CISACISA KEV ransomware field

Threat actors1Source-linked actor relationships

Overview

What is CVE-2019-19781?

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.