CVE-2023-3519

Citrix NetScaler ADC, Citrix NetScaler Gateway

Published 19 Jul 2023 · updated 5 Aug 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 19 Jul 2023, with a remediation deadline of 9 Aug 2023 for US federal agencies. It has been used in ransomware campaigns.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Unauthenticated remote code execution

References

packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html · Exploit, Third Party Advisory, VDB Entry
support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 · Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3519 · US Government Resource