Detections
Analytics

CVE-2026-19489

high

Description

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

References

https://securityaffairs.com/199873/security/citrix-confirmed-two-new-netscaler-flaws-exploited-as-zero-day.html

https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploiting-citrix-netscaler-rce-flaw-in-attacks/

https://www.helpnetsecurity.com/2026/08/21/citrix-netscaler-gateway-cve-2026-19490/

https://www.securityweek.com/exploitation-expected-for-critical-authentication-bypass-patched-in-citrix-netscaler/

https://www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-new-netscaler-flaws-as-soon-as-possible/

https://thehackernews.com/2026/08/critical-netscaler-flaw-can-bypass.html

https://github.com/completetech-security/netscaler-cve-2026-19489-check

https://github.com/CompleTetech-Security/netscaler-cve-2026-19489-check

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62394

Details

Source: Mitre, NVD

Published: 2026-08-19

Updated: 2026-11-09

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 8.8

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L

Severity: High

EPSS

EPSS: 0.00428