CVE-2026-19490

LLM-synthesized narrative grounded in this CVE's description and references.

• Netscaler/ADCllm-fuzzy

  Range: 14.1 through 73.32, 13.1 through 63.21
• Netscaler/NetScaler Gatewayllm-fuzzy

  Range: 14.1 through 73.32, 13.1 through 63.21
• Citrix Systems/NetScaler ADCllm-fuzzy

  Range: 14.1 through 73.32, 13.1 through 63.21
• Citrix Systems/NetScaler Gatewayllm-fuzzy

  Range: 14.1 through 73.32, 13.1 through 63.21

• support.citrix.com/support-home/kbsearch/articlenvdVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Hackers Hit NetScaler Zero-Days Before Citrix Patched
  GovInfoSecurity · Sep 29, 2026
• Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug
  SecurityWeek · Sep 28, 2026
• Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
  Tenable Blog · Sep 27, 2026
• Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
  The Hacker News · Sep 27, 2026
• Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks
  Cyber Security News · Sep 27, 2026
• CISA Warns of Citrix NetScaler Authentication Bypass Vulnerability Exploited in Attacks
  Cyber Security News · Sep 10, 2026
• Critical NetScaler Vulnerability Exploited in Attacks
  SecurityWeek · Sep 10, 2026
• CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
  The Hacker News · Sep 10, 2026
• Netscaler CVE-2026-19490 Zero-Day Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Sep 9, 2026
• 24th August – Threat Intelligence Report
  Check Point Research · Aug 24, 2026
• Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
  Cyber Security News · Aug 23, 2026
• Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
  Help Net Security · Aug 23, 2026
• Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)
  Help Net Security · Aug 21, 2026
• Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
  The Hacker News · Aug 20, 2026
• Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
  SecurityWeek · Aug 20, 2026
• Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
  Cyber Security News · Aug 19, 2026
• CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
  Rapid7 Blog · Aug 19, 2026
• CISA Adds Four Known Exploited Vulnerabilities to Catalog
  CISA Alerts