CVE-2026-19490
🗓️ 19 Aug 2026 12:54:39Reported by NetScalerType 
cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 482 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 22 |
|---|---|---|---|---|
 | NetScaler ADC Component Compromise Data Compromise | 7 Sep 202600:00 | – | bdu_fstec |
 | Exploit for Authentication Bypass Using an Alternate Path or Channel in Citrix Netscaler_Application_Delivery_Controller | 10 Sep 202615:13 | – | githubexploit |
| Exploit for CVE-2026-19490 | 2 Sep 202615:43 | – | githubexploit |
 | CVE-2026-19490 | 19 Aug 202613:38 | – | circl |
 | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 202600:00 | – | cisa_kev |
 | CISA Adds Four Known Exploited Vulnerabilities to Catalog | 9 Sep 202612:00 | – | cisa |
 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 | 19 Aug 202612:00 | – | citrix |
 | CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | 19 Aug 202612:54 | – | cvelist |
 | EUVD-2026-62395 | 19 Aug 202612:54 | – | euvd |
 | CVE-2026-19490-check | 15 Oct 202620:28 | – | kitploit |
10
Node
OR
[
{
"vendor": "NetScaler",
"product": "ADC",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThanOrEqual": "73.32",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1",
"lessThanOrEqual": "63.21",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NetScaler",
"product": "Gateway",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThanOrEqual": "73.32",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1",
"lessThanOrEqual": "63.21",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| SAMLResponse | query param | /cgi/samlauth | Unauthenticated session forgery via GET /cgi/samlauth (SAML Redirect binding) enabling forged session by manipulating SAMLResponse/RelayState. | CWE-288 |
| RelayState | query param | /cgi/samlauth | Unauthenticated session forgery via GET /cgi/samlauth (SAML Redirect binding) enabling forged session by manipulating SAMLResponse/RelayState. | CWE-288 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Oct 2026 19:17Current
8.8High risk
Vulners AI Score8.8
CVSS 3.19.8
CVSS 49.3
EPSS0.23158
SSVC