CVE Tools
Track your stack

Critical NetScaler Vulnerability Exploited in Attacks

SecurityWeekBy Ionut Arghire

Reported exploitedCitrix NetScaler ADCCitrix NetScaler Gateway

Our summary

CISA has confirmed that threat actors are actively leveraging a critical authentication bypass flaw in Citrix NetScaler ADC and NetScaler Gateway appliances. Tracked as CVE-2026-19490 with a CVSS score of 9.3, this vulnerability affects devices configured as gateways or AAA virtual servers and allows remote exploitation without prior authentication. Although Citrix released a patch on August 19, CISA added the bug to its Known Exploited Vulnerabilities catalog this week, citing observed attacks since September 3.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingKiteworks & Citrix Incidents Show Challenges of Zero-Day ResponseCVE-2026-19490
  2. SecurityWeekCitrix Confirms 2 NetScaler Zero-Days After Admins Pulled the PlugCVE-2026-19490
  3. BleepingComputerCISA orders feds to patch exploited Citrix flaws by WednesdayCVE-2026-19490
  4. The Hacker NewsWarning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active ExploitationCVE-2026-19490
  5. Bishop FoxMind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490CVE-2026-19490
  6. The Hacker NewsCISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch DeadlineCVE-2026-19490
  7. BleepingComputerCritical Citrix NetScaler auth bypass now leveraged in attacksCVE-2026-19490
  8. BleepingComputerCISA orders feds to patch Citrix NetScaler RCE flaw by SaturdayCVE-2026-19490
  9. Check Point Research24th August – Threat Intelligence ReportCVE-2026-19490
  10. Help Net SecurityWeek in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgsCVE-2026-19490

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure