CVE-2023-3519

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Citrix — NetScaler ADC and NetScaler Gateway

Date Added 2023-07-19

Remediation Due 2023-08-09

Ransomware Use CONFIRMED

https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467; https://nvd.nist.gov/vuln/detail/CVE-2023-3519

Weakness Classification (1)

CWE-94

Affected Software (7)

Vendor	Product	Version
citrix	netscaler_application_delivery_controller	12.1 – 12.1-55.297
citrix	netscaler_application_delivery_controller	12.1 – 12.1-55.297
citrix	netscaler_application_delivery_controller	13.0 – 13.0-91.13
citrix	netscaler_application_delivery_controller	13.1 – 13.1-37.159
citrix	netscaler_application_delivery_controller	13.1 – 13.1-49.13
citrix	netscaler_gateway	13.0 – 13.0-91.13
citrix	netscaler_gateway	13.1 – 13.1-49.13