CVE-2026-19490

🗓️ 19 Aug 2026 12:54:39Reported by NetScalerType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 423 Views🌐 WEB

CVE-2026-19490 affects NetScaler ADC and Gateway versions 13.1-63.21 and 14.1-73.32.

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	The vulnerability of the nsppe component of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	7 Sep 202600:00	–	bdu_fstec
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Citrix Netscaler_Application_Delivery_Controller	10 Sep 202615:13	–	githubexploit
GithubExploit	Exploit for CVE-2026-19490	2 Sep 202615:43	–	githubexploit
Circl	CVE-2026-19490	19 Aug 202613:38	–	circl
CISA KEV Catalog	Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability	9 Sep 202600:00	–	cisa_kev
Citrix	NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490	19 Aug 202612:00	–	citrix
Cvelist	CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490	19 Aug 202612:54	–	cvelist
EUVD	EUVD-2026-62395	19 Aug 202612:54	–	euvd
Kitploit	CVE-2026-19490-check	24 Sep 202619:57	–	kitploit
Kitploit	CVE-2026-19490	24 Sep 202619:08	–	kitploit

NVD

Node

citrix netscaler_application_delivery_controllerRange13.1–13.1-37.277fips

citrix netscaler_application_delivery_controllerRange13.1–13.1-37.277ndcpp

citrix netscaler_application_delivery_controllerRange13.1–13.1-63.21-

citrix netscaler_application_delivery_controllerRange14.1–14.1-73.32-

citrix netscaler_application_delivery_controllerRange14.1-66.68–14.1-73.32fips

citrix netscaler_gatewayRange13.1–13.1-63.21

citrix netscaler_gatewayRange14.1–14.1-73.32

[
  {
    "vendor": "NetScaler",
    "product": "ADC",
    "versions": [
      {
        "status": "affected",
        "version": "14.1",
        "lessThanOrEqual": "73.32",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "13.1",
        "lessThanOrEqual": "63.21",
        "versionType": "patch"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "NetScaler",
    "product": "Gateway",
    "versions": [
      {
        "status": "affected",
        "version": "14.1",
        "lessThanOrEqual": "73.32",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "13.1",
        "lessThanOrEqual": "63.21",
        "versionType": "patch"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
support	www.support.citrix.com/support-home/kbsearch/article
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
SAMLResponse	query param	/cgi/samlauth	Unauthenticated session forgery via SAML HTTP-Redirect binding on NetScaler ADC/Gateway: GET /cgi/samlauth with SAMLResponse and RelayState can lead to forged session without proper authentication.	CWE-288
RelayState	query param	/cgi/samlauth	Unauthenticated session forgery via SAML HTTP-Redirect binding on NetScaler ADC/Gateway: GET /cgi/samlauth with SAMLResponse and RelayState can lead to forged session without proper authentication.	CWE-288

10 Sep 2026 12:48Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.19.8

CVSS 49.3

EPSS0.0701

SSVC