CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML 认证绕过 通过 GET /cgi/samlauth 上的 SAML HTTP-Redirect 绑定处理器，可在 Citrix NetScaler ADC / NetScaler Gateway 上实现未认证的会话伪造。CVSS 4.0 9.3，CWE-288。公告 CTX696939（2026-08-19），无缓解措施。原始报告的功劳归于 Samarth Vashisht（摩根大通渗透测试团队）；本仓库中的根因分析和代码均为我自己的成果。 受影响版本：14.1 早于 14.1-73.32，13.1 ...

Problem with the memory dump on MPX

Platform details exec: show ns hardware Platform: NSMPX-8900 8CPU+32GB+4F1X+6E1K+1E1K+1COL 8955 30010 Manufactured on: 8/7/2021 CPU: 2100MHZ Host Id: xxxxxxxx Serial no: xxxxxxxx Encoded serial no: xxxxxxxxxx Netscaler UUID: xxxxxxxxxxxx BMC Revision: 4.61 Pasting ns.log.2 output for cleaner logs...

Citrix ADC nsppe buffer overflow

Added: 08/09/2023 CVE: CVE-2023-3519 Background Citrix ADC formerly NetScaler ADC is an application delivery and load balancing platform. Problem A buffer overflow vulnerability in the nsppe process in Citrix ADC allows an unauthenticated attacker to execute arbitrary commands by making a special...

Citrix ADC (NetScaler) Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Forms SSO Target RCE', 'Description' = %q A vulnerability exists within Citrix ADC that allows an unauthenticated attacker t...

Citrix ADC (NetScaler) Forms SSO Target RCE

A vulnerability exists within Citrix ADC that allows an unauthenticated attacker to trigger a stack buffer overflow of the nsppe process by making a specially crafted HTTP GET request. Successful exploitation results in remote code execution as root. Module Options msf use...