CVE Watch—

CVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVSS

—

No CVSS

EPSS

99.4%

p100

KEV

YES

Jul 19, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.4%EPSS · 30 days99.4%

2026-06-302026-07-16

KEV catalog record

Product

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerability

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Added to KEV

Jul 19, 2023

Remediate by

Aug 9, 2023

Known ransomware use

Yes

Summary description

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467; https://nvd.nist.gov/vuln/detail/CVE-2023-3519

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-4966—

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—CVE-2023-6549—

99.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—CVE-2023-6548—

86.7%

KEV—76Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability—