PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched

bishopfox.com | vulnerability | CVE-2023-3519 | #rce | #vulnerability-research | #exploit | #citrix | #netscaler | #cve-2023-3519
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox developed an exploit for CVE-2023-3519, an unauthenticated stack overflow in Citrix ADC Gateway granting RCE; roughly 53% of the 61,000 exposed appliances were unpatched.
CVE
CVE-2023-3519
Published
Collected

Related coverage

vulnerability · bishopfox.com
Analysis and Exploitation of CVE-2023-3519
Bishop Fox analyzes and exploits CVE-2023-3519, the critical Citrix ADC RCE seen in the wild, pinpointing a simpler vulnerable function (ns_aaa_gwtest_get_event_and_target_names) via patch diffing.
research · slcyber.io
Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3)
# Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3) Get research alerts Share on social %20\(Part%203\)) August 9, 2023 20 min read ### Table of Contents TOC Element...
research · slcyber.io
Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)
# Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2) Get research alerts Share on social ) July 24, 2023 3 min read ### Table of Contents TOC Element In our last post we...
research · slcyber.io
Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway
# Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway Get research alerts Share on social ) July 4, 2023 6 min read ### Table of Contents TOC Element **Update: we have discovered the...
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
vulnerability · bishopfox.com
No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452
Bishop Fox shows how to verify the Citrix NetScaler patch for CVE-2026-8452 from the outside: benign SAML requests reveal patch state without crashes, plus IOCs—and one crash signal that misleads.
Back