Vulnerability Intelligence

🛡 CVE-2019-19781

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2022-05-03. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.

🏹 Attributed exploitation

Malware / ransomware (KEV): REvil, Ragnarok, Maze, DoppelPaymer (Citrix ADC)

Threat actors (KEV): multiple ransomware

🔗 External references & OSINT

🔄 Internal pivots & actions

🗃 Data Management

🧩 Advanced Capabilities