Search
Find merged stories by title or summary.
Citrix security advisory (AV26-833)
Serial Number: AV26-833 Date: August 19, 2026 As of August 19, 2026, NetScaler is affected by vulnerabilities in the following products: • NetScaler ADC and NetScaler • Version 13.1 prior to or equal to 13.1-63.21 • Version 14.1 prior to or equal to 14.1-73.32 • NetScaler ADC FIPS • Prior to 14.1-73.32 FIPS • NetScaler ADC FIPS and NDcPP • Prior to 13.1-37.277 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. • NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 • Citrix Security Advisories Citrix security advisory (AV26-833) - Canadian Centre for Cyber Security
Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
Cloud Software Group has issued a critical security bulletin warning customers of two serious vulnerabilities affecting NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). Tracked as CVE-2026-19489 and CVE-2026-19490, the flaws could allow attackers to trigger denial-of-service conditions or bypass authentication entirely on unpatched appliances, putting enterprise remote access infrastructure at significant risk. Critical Citrix NetScaler Vulnerability The more severe of the two, CVE-2026-19490, carries a CVSS v4. 0 base score of 9. 3 and is classified under CWE-288, Authentication Bypass Using an Alternate Path. This flaw allows an attacker to circumvent authentication controls on NetScaler appliances configured as a Gateway for SSL VPN, ICA Proxy, CVPN, or RDP Proxy, or as an AAA virtual server.
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Overview On August 19, 2026, a security advisory was published for CVE-2026-19490 , a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4. 0 base score of 9. 3 and can be exploited remotely by an unauthenticated attacker over the network without user interaction or elevated privileges. NetScaler ADC and NetScaler Gateway are widely deployed enterprise networking products commonly positioned at or near the network perimeter. NetScaler ADC provides application delivery, traffic management, load balancing, SSL/TLS offloading, and application security capabilities, while NetScaler Gateway provides secure remote access and VPN functionality.
You've reached the end of current stories for this search.