Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

🗓️ 20 Aug 2026 13:35:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 18 Views

Critical CVE-2026-19490 (CVSS 9.3) authentication bypass on NetScaler Gateway and AAA servers with SAML config.

Reporter	Title	Published	Views	Family All 25
BDU FSTEC	The vulnerability of the nsppe component of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	7 Sep 202600:00	–	bdu_fstec
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Citrix Netscaler_Application_Delivery_Controller	10 Sep 202615:13	–	githubexploit
GithubExploit	Exploit for CVE-2026-19490	2 Sep 202615:43	–	githubexploit
Circl	CVE-2026-19489	19 Aug 202613:38	–	circl
Circl	CVE-2026-19490	19 Aug 202613:38	–	circl
CISA KEV Catalog	Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability	9 Sep 202600:00	–	cisa_kev
Citrix	NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490	19 Aug 202612:00	–	citrix
CVE	CVE-2026-19489	19 Aug 202612:45	–	cve
CVE	CVE-2026-19490	19 Aug 202612:54	–	cve
Cvelist	CVE-2026-19489	19 Aug 202612:45	–	cvelist

04 Sep 2026 17:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 49.3

EPSS0.06002

SSVC

NetScaler ADC authentication bypass CVE-2026-19490 SAML configuration CVSS 9.3 denial of service CVE-2026-19489