Exploit for CVE-2019-19781-CitrixRCE

kitploit · 2026-09-02

Description

Unauthenticated RCE in Citrix NetScaler ADC via path traversal and template injection bypasses.

Affected Citrix Application Delivery Controller Firmware versions

Citrix Application Delivery Controller Firmware= 10.5, 11.1, 12.0, 12.1, 13.0

All known vulnerabilities by product

Citrix Application Delivery Controller Citrix Gateway Netscaler

CVSS 9.8 for CVE-2019-19781

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-09-02 01:50

Last Seen:2026-09-03 22:03

Reporter:KitPloit

Tags

Citrix NetScaler ADCRemote Code ExecutionTemplate InjectionPath TraversalUnauthenticatedCommand Injection

Other exploits for CVE-2019-19781

2026-09-09 KitPloitKITPLOIT

2026-09-09 KitPloitKITPLOIT

citrix-honeypot

2026-09-09 KitPloitKITPLOIT

2026-09-09 KitPloitKITPLOIT

CVE-2019-19781-exploit

2026-09-09 KitPloitKITPLOIT

cisagov__check-cve-2019-19781.4142e02b

2026-09-09 KitPloitKITPLOIT

CitrixNetscalerAnalysis

2026-09-09 KitPloitKITPLOIT

CVE-2019-19781-Checker

2026-09-09 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-W4FZ5UCK5-CVE-2019-19781-CITRIXRCE
# Citrix: несанкционированное удаленное выполнение кода (эксплойт) - CVE-2019-19781

Ссылки: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/

# Обход:   


1 - Удаленные / измененные скрипты в: /vpn/../vpns/portal/scripts/*   
2 - Проблемы с прямой косой чертой ("/") после атаки внедрения команды perl (инъекция шаблона)