【Vulnerability Alert】High-risk security vulnerability (CVE-2026-19490) exists in NetScaler ADC and NetScaler Gateway. Please verify and apply patches as soon as possible.

• Subject: 【Vulnerability Alert】High-risk security vulnerability (CVE-2026-19490) exists in NetScaler ADC and NetScaler Gateway. Please verify and apply patches as soon as possible.

• Content:
  • Forwarded from National Information Sharing and Analysis Center Security Alert NISAC-200-202608-00000011
  • Researchers have discovered an Authentication Bypass vulnerability (CVE-2026-19490) in NetScaler ADC and NetScaler Gateway. When the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy) or AAA Virtual Server, an unauthenticated remote attacker can bypass the authentication mechanism using an alternate path. Please verify and apply patches as soon as possible.
• Affected Platforms:
  • NetScaler ADC and NetScaler Gateway versions 14.1-x to 14.1-73.32 (excluded)
  • NetScaler ADC and NetScaler Gateway versions 13.1-x to 13.1-63.21 (excluded)
  • NetScaler ADC FIPS versions prior to 14.1-73.32 (excluded)
  • NetScaler ADC FIPS and NDcPP versions prior to 13.1-37.277 (excluded)
  • Secure Private Access for Hybrid Deployments using NetScaler instances
• Recommendations:
  • The vendor has released security updates for this vulnerability. Please refer to the official advisory for updates at the following URL: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939
• References:
  1. https://nvd.nist.gov/vuln/detail/CVE-2026-19490
  2. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939

Computer and Communication Center
Network System Division