CVE-2017-6316Citrix Multiple Products Remote Code Execution Vulnerability

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.

9.8 CRITICALEPSS 73.02%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-21 23:55 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.8	CRITICAL	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2017-6316
Status: Published
Assigner (CNA): mitre
Published: Jul 20, 2017
Last modified: 2025-10-21 23:55 UTC
Weaknesses: CWE-20

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 13:47 UTC.