Citrix ADC SSLVPN Path Traversal (CVE-2019-19781) for 2026-10-19
Oct 19, 2026
Exploitation
Last Updated: 00:00 UTC
CVE-2019-19781 is a path traversal in the Citrix ADC SSLVPN component via /vpns/cfg/ that achieves unauthenticated RCE through a crafted smb.conf file. Despite its 2019 disclosure it continues to be scanned for and exploited years later, reflecting the long tail of unpatched appliances.
CVE References
MITRE ATT&CK
Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application
Observed URIs
Attackers by Country
| Sweden | 3 | 75.0% |
| United Arab Emirates | 1 | 25.0% |
IP Address : ASN : City/Provider
-
185.196.9.61 : unknown : unknown
-
198.167.197.162 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.194 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.204 : AS39287 Materialism s.r.l. : Sweden
-
31.57.216.50 : AS197769 VPS Dedicated LLC : United Arab Emirates