Actively exploited in the wild

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix — NetScaler ADC and NetScaler Gateway · Listed in the CISA KEV since 2023-07-19. This indicates confirmed attacks in production environments.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2023-3519

CriticalCVSS 9.8KEV

Published: 19/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

99.34%

100th percentile — higher than 100% of all known CVEs

Summary

CVE-2023-3519 vulnerability allows unauthenticated remote code execution. This can lead to system takeover.

Risk Assessment

The risk to the organization involves the potential for remote execution of malicious code, which may result in data loss or system compromise.

Recommendation

It is recommended to immediately update the software to the latest version to mitigate this vulnerability. Additionally, monitor systems for unauthorized activity.

Original NVD description (English source)

Unauthenticated remote code execution