VulnerabilityBleeping Computer
9.0 — CRITICAL
Citrix urges admins to patch new NetScaler flaws as soon as possible
Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Citrix has identified two high-severity vulnerabilities in NetScaler Gateway and ADC appliances, CVE-2026-19490 and CVE-2026-19489, which can be exploited by remote attackers to bypass authentication or cause denial-of-service attacks. These vulnerabilities have been flagged as not yet exploited but are considered critical due to the severity of the issues.
⚙️Technical Details
💥Impact Assessment
Severity: Critical
Who Is at Risk
Organizations with Citrix NetScaler Gateway and ADC appliances, including federal agencies and critical infrastructure operators
🛡️Recommended Actions
1Inspect NetScaler configuration for SAML Action configuration and Auth or VPN vserver strings to determine vulnerability
2Upgrade vulnerable NetScaler ADC and NetScaler Gateway appliances to recommended builds as soon as possible
3Patch two other NetScaler vulnerabilities, CVE-2026-3055 and CVE-2026-4368, which were recently exploited in the wild
📦Affected Products
Software: NetScaler ADC and NetScaler GatewayHardware:
🔐NVD Verified DataVERIFIED
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.