Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
6 versions affected across 6 products
| Date | Total | Labels |
|---|
| 2026-03-04 | 1 | Active Exploitation1 |
| 2026-08-09 | 1 | General1 |
| 2026-09-27 | 1 | Patch1 |
@shodanhq 7/13 Vuln & CVE Filters • vuln:CVE-2021-44228 (Log4Shell) • vuln:CVE-2019-19781 • tag:ics • cloud.provider:AWS • cloud.region:us-east-1 Directly hunt known vulnerable services. #bugbounty #infosec #hacking #cybersecurity #vuln
Post summary
The post announces a set of CVE filters for hunting known vulnerabilities on AWS in the us-east-1 region, but contains no technical details, PoC, or exploitation information.
1/ Chinese APT41, known for its dual role in espionage and financial crime, targets industries from telecom to healthcare. Their attacks often exploit CVE-2019-19781. #ThreatIntel #InfoSec
Post summary
APT41 is actively exploiting CVE‑2019‑19781 across multiple industries.
NØØT Security Alerts Classification: Critical CVE: CVE-2019-19781 Product: Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Summary: VulnCheck reports real-world exploitation activity affecting Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. Evidence: Public PoC/exploit available; Ransomware use confirmed; Active exploitation reported; Severe impact class Impact: The vulnerability is associated with ransomware activity and may contribute to compromise of exposed systems. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 16 Jan 2020 Source: https://vulncheck.com/xdb/5daef00ab695 #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Citrix #ApplicationDeliveryControllerADCGatewayandSD_WANWANOPAppliance #CVE_2019_19781 #ActiveExploitation #Exploit #Ransomware #RansomwareAttack
🧠 Engineering & Research Digest (Sep 27) CVE-2019-19781--Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities: patch Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities #CyberSecurity #InfoSec #PCMedicalist #CompSci https://t.co/pnvNLKShcs
🧠 Engineering & Research Digest (Sep 27) CVE-2019-19781--Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities: patch Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities #CyberSecurity #InfoSec #PCMedicalist #CompSci https://t.co/QPEZydLPEw
Post summary
The tweet shares a vendor FAQ resource for CVE-2019-19781 (Citrix NetScaler zero-day) that explicitly highlights patch information as a primary focus.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | citrix | application_delivery_controller | - | - | - |
| OS | citrix | application_delivery_controller_firmware | 10.5 | - | - |
| OS | citrix | application_delivery_controller_firmware | 11.1 | - | - |
| OS | citrix | application_delivery_controller_firmware | 12.0 | - | - |
| OS | citrix | application_delivery_controller_firmware | 12.1 | - | - |
| OS | citrix | application_delivery_controller_firmware | 13.0 | - | - |
| HW | citrix | gateway | - | - | - |
| OS | citrix | gateway_firmware | 13.0 | - | - |
| HW | citrix | netscaler_gateway | - | - | - |
| OS | citrix | netscaler_gateway_firmware | 10.5 | - | - |
| OS | citrix | netscaler_gateway_firmware | 11.1 | - | - |
| OS | citrix | netscaler_gateway_firmware | 12.0 | - | - |
| OS | citrix | netscaler_gateway_firmware | 12.1 | - | - |