60
Citrix NetScaler Under Active Recon for CVE-2026
60
Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)
60
60
CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises
60
Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Critical NetScaler Vulnerability Exploited in Attacks
CISA added critical Citrix NetScaler flaw CVE-2026-19490 (CVSS 9.3) to its KEV catalog after confirming exploitation of gateway and AAA virtual servers in the wild.
CISA warned that threat actors are exploiting CVE-2026-19490, a critical-severity flaw (CVSS 9.3) affecting NetScaler ADC and NetScaler Gateway appliances configured as a gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Citrix patched the bug on August 19, and Rapid7 warned it is remotely exploitable without authentication. Sensor data from Previdian shows exploitation ongoing since at least September 3, one day after a public exploit appeared on GitHub, with matching requests observed from three IPs across three countries. CISA added the flaw to its Known Exploited Vulnerabilities catalog, giving federal agencies three days to patch under BOD 26-04.
90
Exploits in the Wild for Citrix ADC and Citrix Gateway Directory Traversal Vulnerability CVE-2019
Unit 42 confirmed in-the-wild exploitation of CVE-2019-19781, a critical Citrix ADC/Gateway directory traversal flaw enabling unauthenticated file access and RCE.
CVE-2019-19781, a CVSS 9.8 directory traversal vulnerability, affects all supported versions of Citrix ADC and Citrix Gateway. Unit 42 captured multiple exploitation attempts in the wild and identified scanning activity from roughly 700 Shodan-exposed hosts. The flaw stems from improper pathname handling in Apache, allowing unauthenticated attackers to read sensitive files like smb.conf or achieve remote code execution via crafted XML. Palo Alto Networks released Threat Prevention signatures 57497 and 57570 on January 7, 2020, while Citrix published advisories CTX267027 and CTX267679 with responder policy mitigations pending a late-January patch.
82
60
60
60
60
60
60
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
60
60
It’s a hot 0-day summer for Apple, Google, and Microsoft security fixes
60
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
60
CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation
60
60
60
60