Loading CVE intelligence

CVE-2019-19781

CriticalPublished

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Published: Dec 27, 2019
Updated: Aug 12, 2026
Assigning CNA: mitre
Evidence observed: Jan 11, 2020

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Sources

37

citrixvulncheckScanner
a script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomains
CVE-2019-19781Scanner
Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.
CVE-2019-19781Scanner
Automated script for Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.
Detect-CVE-2019-19781

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Scanner

Detects if a server is vulnerable to CVE-2019-19781 by checking a specified IP address, providing a quick security assessment for this known vulnerability.

massCitrixScanner

Código desenvolvido para a verificação em massa da vulnerabilidade CVE-2019-19781 de hosts descobertos pelo Shodan. Pull requests são bem vindas.

CVE-2019-19781_IOCsInformational

Curated indicators of compromise (IOCs) for CVE-2019-19781, including IP addresses and whois data from honeypot logs to aid threat detection and incident response.

CVE-2019-19781Exploit

Shell-based remote code execution exploit targeting CVE-2019-19781 in Citrix Application Delivery Controller and Citrix Gateway. Executes arbitrary commands on vulnerable hosts.

Shitrix-CVE-2019-19781Exploit

Shell exploit script for CVE-2019-19781 (Citrix ADC) enabling remote command execution on vulnerable targets with multi-word command support.

CVE-2019-19781Exploit

Python exploit for CVE-2019-19781 targeting Citrix ADC with template injection to achieve remote code execution on vulnerable gateways.

CVE-2019-19781-exploitExploit

Exploit for CVE-2019-19781 targeting Citrix ADC/NetScaler vulnerability. Provides automated exploitation for penetration testing and red team operations.

CVE-2019-19781Exploit

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781Exploit

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781Exploit

Python CVE-2019-19781 exploit

CVE-2019-19781Detection

CVE-2019-19781 Attack Triage Script

CVE-2019-19781Exploit

Remote code execution exploit for Citrix Application Delivery Controller and Gateway (CVE-2019-19781) that executes arbitrary commands on vulnerable hosts via a simple bash script.

cve-2019-19781Exploit

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

CVE-2019-19782Scanner

Batch vulnerability scanner for CVE-2019-19781 that checks multiple URLs for the Citrix ADC vulnerability, outputting vulnerable and error links.

Exploits_CVE-2019-19781Exploit

Remote code execution exploit for Citrix Application Delivery Controller and Gateway (CVE-2019-19781). Executes arbitrary commands on vulnerable targets via a simple bash script.

CVE-2019-19781PoC

Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781Scanner

Repository documenting CVE-2019-19781 with a scanner, honeypot, and DFIR notes for Citrix ADC vulnerability detection and incident response.

CVE-2019-19781-CheckerScanner

Check your website for CVE-2019-19781 Vulnerable

CVE-2019-19781Scanner

批量概念驗證用

Citrix_CVE-2019-19781Scanner

Took at stab at an NSE discovery script for CVE-2019-19781.

CVE-2019-19781Exploit

Python exploit for CVE-2019-19781 targeting Citrix Netscaler remote code execution vulnerability with automated payload delivery.

citrix_dir_traversal_rceExploit

The exploitation module for the CVE-2019-19781 #Shitrix (Vulnerability in Citrix Application Delivery Controller and Citrix Gateway).

webcvescannerScanner

Gather a list of Citrix appliances in a country / state pair, and check if they're vulnerable to CVE-2019-19781

CVE-2019-19781Exploit

CVE-2019-19781 Citrix RCE

CVE-2019-19781-CitrixExploit

Exploit for CVE-2019-19781 targeting Citrix ADC/NetScaler directory traversal and remote code execution vulnerability.

CVE-2019-19781-pocPoC

修改的poc，适用于python3

CVE-2019-19781Exploit

RCE, Citirx ADC and Gateway Directory Traversal

Ctirix_RCE-CVE-2019-19781Exploit

Citrix ADC RCE cve-2019-19781

CVE-2019-19781-CitrixRCEExploit

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781

CVE-2019-19781Exploit

Exploit module for CVE-2019-19781 targeting Citrix ADC, integrated with Router Scan for automated vulnerability scanning and exploitation.

APT-BackpackExploit

cve-2019-11510, cve-2019-19781, cve-2020-5902, cve-2021-1497, cve-2021-20090, cve-2021-22006, cve-2021-22205, cve-2021-26084, cve-2021-26855, cve-2021-26857, cve-2021–26857, cve-2021–26858, cve-2021–26865

Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)Exploit

Project Zero India · multiple · Jan 11, 2020

Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)Exploit

mekhalleh · multiple · Jan 13, 2020

Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path TraversalExploit

Dhiraj Mishra · multiple · Jan 16, 2020