CVE-2019-12991CISA KEVEPSS p99.4%

CVE-2019-12991Citrix SD-WAN and NetScaler Command Injection Vulnerability

Citrix / SD-WAN and NetScaler

Description

Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.

Scoring

EPSS74.51% probability of exploitation · percentile 99.4% · 2026-06-17T12:03:21Z

CISA KEV entry

Added to KEV: 2022-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryCitrix SD-WAN and NetScaler Command Injection Vulnerabilitykev-cve-2019-129910%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
CVE
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
CVE
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVE
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
CVE
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVE
Citrix Multiple Products Remote Code Execution Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.