Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Citrix NetScaler urgent patch guidance for CVE-2026-19490

Advisory/Mitigation
First reported
Last updated
Happening score
H score 54
2 unique sources, 2 articles

Summary

Hide ▲

Citrix NetScaler administrators were told to urgently review exposure and upgrade impacted appliances for CVE-2026-19490, a CVSS 9.3 authentication-bypass flaw affecting NetScaler ADC and NetScaler Gateway in AAA virtual server or Gateway configurations. Citrix advised customers to check the official security bulletin and patch affected builds, and NCC-BE later urged organizations to prioritize vulnerable deployments. CISA then added CVE-2026-19490 to its KEV catalog on September 10, 2026, with an FCEB patch deadline of September 12, 2026. The same flaw has also been targeted in the wild, including 56 attempts against Previdian honeypot systems since September 3, 2026.

Related Happenings

NLnet Labs security patch release for CVE-2026-81642

Security Patch Release
H score39 First: 17.09.2026 15:30 Last: 17.09.2026 15:30 Sources 1

About this happening: NLnet Labs released Unbound 1.26.1 to close nine security flaws, including CVE-2026-81642 in the DNSSEC validator. The update addresses a critical heap overf...

Open Happening

Citrix NetScaler authentication bypass (CVE-2026-19490)

Vulnerability
H score29 First: 04.09.2026 18:25 Last: 04.09.2026 18:25 Sources 1

How related: "On 3 September, one of our NetScaler sensors received requests matching the PoC from three distinct source IPs, geolocated to Australia, the United States and Germany," Dewhurst told BleepingComputer.

About this happening: CVE-2026-19490 is now being actively probed in the wild, putting exposed Citrix NetScaler appliances at risk of remote authentication bypass. Previdian observe...

Open Happening

Citrix NetScaler ADC/Gateway memory overflow flaw (CVE-2026-8452)

Vulnerability
H score34 First: 27.08.2026 12:16 Last: 27.08.2026 12:16 Sources 1

About this happening: CVE-2026-8452 is an actively exploited memory overflow flaw in Citrix NetScaler ADC and NetScaler Gateway appliances, including systems configured with Gateway V...

Open Happening

CISA adds six flaws to KEV catalog

Public Sector Action
H score37 First: 27.08.2026 10:05 Last: 27.08.2026 10:05 Sources 1

About this happening: CISA added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, directing federal defenders to prioritize remediation of actively exploited weaknesses i...

Open Happening

Microsoft security patch release for CVE-2026-62832

Security Patch Release
H score5 First: 12.08.2026 09:41 Last: 12.08.2026 09:41 Sources 1

About this happening: Microsoft shipped patches for 421 security flaws, including 236 flaws in Windows, as part of a broad update that also remediates multiple named CVEs. The release cover...

Open Happening

Timeline

  1. 04.09.2026 18:25 3 articles · 13d ago

    Citrix and NCC-BE urge patching for CVE-2026-19490

    Mitigation Patch Update

    Citrix told customers to review the official NetScaler ADC and NetScaler Gateway security bulletin, assess whether their deployments were affected, and upgrade impacted appliances to recommended builds for CVE-2026-19490; NCC-BE later warned on Friday that exploitation attempts were targeting the flaw and urged organizations to prioritize patching vulnerable Citrix NetScaler appliances.

    Show sources
    Open in new tab