【Vulnerability Alert】NetScaler ADC and NetScaler Gateway Contain a High-Risk Security Vulnerability (CVE-2026-19490). Please Confirm and Apply Patches as Soon as Possible

publish date : 2026-08-28 update date : 2026-08-28

Source: Ministry of education information & communication security contingency platform

"" "" ""

Publication Number TACERT-ANA-2026082703084646 Publication Time 2026-08-27 15:54:47
Incident Type ANA-Vulnerability Alert Discovery Time 2026-08-27 15:54:47
Impact Level Medium  
[Subject]
【Vulnerability Alert】NetScaler ADC and NetScaler Gateway Contain a High-Risk Security Vulnerability (CVE-2026-19490). Please Confirm and Apply Patches as Soon as Possible
[Content]

Forwarded from the National Institute of Cyber Security Cybersecurity Alert NISAC-200-202608-00000011

Researchers discovered that NetScaler ADC and NetScaler Gateway contain an Authentication Bypass vulnerability (CVE-2026-19490). When the device is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy) or an AAA virtual server, an unauthenticated remote attacker may bypass the authentication mechanism through an alternate path. Please confirm and apply patches as soon as possible.

Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed)
[Affected Platform]

NetScaler ADC and NetScaler Gateway versions 14.1-x to versions prior to 14.1-73.32
NetScaler ADC and NetScaler Gateway versions 13.1-x to versions prior to 13.1-63.21
NetScaler ADC FIPS versions prior to 14.1-73.32
NetScaler ADC FIPS and NDcPP versions prior to 13.1-37.277
Secure Private Access for Hybrid Deployments using NetScaler instances

[Recommended Actions]

The official vendor has released a remediation update for the vulnerability. Please refer to the official instructions for updating. The URL is as follows: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939

[Reference]

1.https://nvd.nist.gov/vuln/detail/CVE-2026-19490
2.https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer: Computer Center