ON August 19, 2026, a security advisory was released for CVE-2026-19490, a critical authentication bypass vulnerability in Citrix NetScaler ADC and NetScaler Gateway with a CVSS v4.0 score of 9.3. This vulnerability allows unauthenticated attackers remote access without user interaction. The impacted versions are classified and organizations are advised to prioritize patching. As of the advisory date, no known exploits were observed in the wild, but Citrix products are high-value targets. Organizations should check their systems for specific configurations indicating vulnerability and apply necessary updates.
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
CyberSIXT Evidence Panel
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
Citrix NetScaler Zero Days Exploited Against Unpatched Systems
securityaffairs.com
-
CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik Flaws
securityonline.info
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
securityaffairs.com
-
CISA Warns Attackers Are Exploiting Critical Citrix NetScaler Flaw
securityweek.com
-
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
thehackernews.com
-
CISA Warns of Actively Exploited Citrix NetScaler Auth Bypass
cisa.gov
-
Citrix fixes NetScaler auth bypass flaw CVE-2026-19490
securityweek.com
-
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
www.rapid7.com
-
Citrix patches critical NetScaler auth bypass flaw CVE-2026-19490
securityonline.info