Vulnerability Details CVE-2026-19490
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.06
EPSS Ranking 92.9%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.
Ransomware Campaign
Unknown
Products affected by CVE-2026-19490
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.159
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.164
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.176
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.183
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.207
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.235
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.236
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.241
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.262
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.272
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-49.13
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-49.15
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-51.15
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-53.17
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-55.34
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-58.32
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-59.19
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-59.22
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-60.32
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-61.26
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-62.23
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-63.18
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-12.35
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-25.53
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-29.72
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-43.56
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-47.46
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-47.48
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-51.80
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-56.74
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-60.58
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.59
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-72.61
-
cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-8.50
-
cpe:2.3:a:citrix:netscaler_gateway:13.1
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-49.13
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-49.15
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-51.15
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-52.19
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-53.17
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-53.24
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-54.29
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-55.34
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-56.18
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-57.26
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-58.32
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-59.19
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-59.22
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-60.32
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-61.26
-
cpe:2.3:a:citrix:netscaler_gateway:13.1-62.23
-
cpe:2.3:a:citrix:netscaler_gateway:14.1
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-12.35
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-17.38
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-21.57
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-25.53
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-25.56
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-29.72
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-34.42
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-38.53
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-4.42
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-43.56
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-47.46
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-47.48
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-51.80
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-56.74
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-60.57
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-60.58
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-66.59
-
cpe:2.3:a:citrix:netscaler_gateway:14.1-8.50