60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Citrix Patches Three Zero Days as One Sees Active Exploitation
60
60
60
60
60
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of
60
60
60
60
60
Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)
Citrix patched a critical authentication bypass, CVE-2026-19490, in NetScaler Gateway and NetScaler ADC, urging customers to upgrade immediately.
Citrix has patched two flaws in NetScaler ADC and NetScaler Gateway. CVE-2026-19490 is a critical authentication bypass (CVSS v4.0 9.3) that works when the appliance is configured as an SSL VPN, ICA Proxy, CVPN, RDP Proxy Gateway or AAA virtual server, with additional conditions depending on firmware and SAML configuration. A second flaw, CVE-2026-19489 (CVSS 8.8), is a memory overflow that can cause denial of service when SIP ALG is enabled on LSN setups. Rapid7 had not observed exploitation as of August 19, 2026, but urged emergency patching; a signature-based mitigation is available via NetScaler Console.
78
60
60
2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
Citrix patched NetScaler ADC/Gateway: auth bypass CVE-2026-19490 (CVSS 9.3) on Gateway/AAA configs and memory overflow CVE-2026-19489 (CVSS 8.8) requiring SIP ALG.
On 19 August 2026 Citrix published an advisory fixing two critical-severity issues in NetScaler ADC and NetScaler Gateway versions 14.1 before 14.1-73.32 and 13.1 before 13.1-63.21, plus FIPS/NDcPP builds. CVE-2026-19490 (CVSS 9.3) is an authentication bypass via alternate path, exploitable when the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server, with a SAML action condition on newer builds. CVE-2026-19489 (CVSS 8.8) is a memory overflow causing unpredictable behaviour or denial of service, requiring SIP ALG enabled on a Large Scale NAT group. CERT-EU recommends applying updated builds as soon as possible.
66
60
Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025
60
60
Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!
60
60
60
60