CVE-2026-19490

CVE-2026-19490 — Bypass de autenticación SAML en NetScaler ADC/Gateway Falsificación de sesión no autenticada en Citrix NetScaler ADC / NetScaler Gateway a través del manejador de enlace HTTP-Redirect SAML en GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Boletín CTX696939 2026-08-19, sin workarounds...

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway relates to bypassing the authentication process by using an alternative path or channel...

Problem with the memory dump on MPX

Platform details exec: show ns hardware Platform: NSMPX-8900 8CPU+32GB+4F1X+6E1K+1E1K+1COL 8955 30010 Manufactured on: 8/7/2021 CPU: 2100MHZ Host Id: xxxxxxxx Serial no: xxxxxxxx Encoded serial no: xxxxxxxxxx Netscaler UUID: xxxxxxxxxxxx BMC Revision: 4.61 Pasting ns.log.2 output for cleaner logs...

Citrix ADC nsppe buffer overflow

Added: 08/09/2023 CVE: CVE-2023-3519 Background Citrix ADC formerly NetScaler ADC is an application delivery and load balancing platform. Problem A buffer overflow vulnerability in the nsppe process in Citrix ADC allows an unauthenticated attacker to execute arbitrary commands by making a special...

Citrix ADC (NetScaler) Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Forms SSO Target RCE', 'Description' = %q A vulnerability exists within Citrix ADC that allows an unauthenticated attacker t...

Citrix ADC (NetScaler) Forms SSO Target RCE

A vulnerability exists within Citrix ADC that allows an unauthenticated attacker to trigger a stack buffer overflow of the nsppe process by making a specially crafted HTTP GET request. Successful exploitation results in remote code execution as root. Module Options msf use...