Firetruck

CVE-2026-19490

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ADCNetScaler / ADC>= 13.1, <= 63.21affected
ADCNetScaler / ADC>= 14.1, <= 73.32affected
GatewayNetScaler / Gateway>= 13.1, <= 63.21affected
GatewayNetScaler / Gateway>= 14.1, <= 73.32affected