⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2019-19781

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Citrix ADC/Gateway unauthenticated RCE — exploited within 24h of PoC release. Ransomware groups and APTs mass-exploited. Apply patches or apply Citrix mitigation steps. If exposed before patching, assume full compromise and begin IR.

📋 Official Description

An issue was discovered in Citrix Application Delivery Controller (ADC) and Citrix Gateway. Allows directory traversal allowing code execution without authentication. Citrix Shitrix.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →