Known Exploited Vulnerabilities September 09, 2026 · CISA KEV Catalog

CVE-2026-19490: Citrix Net Scaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-19490 Citrix
Related: CVE-2026-88779: Citrix Net Scaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Known Exploited Vulnerabilities · Oct 04, 2026
CVE-2026-88771: Citrix Net Scaler Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Sep 27, 2026
CVE-2026-88772: Citrix Net Scaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Known Exploited Vulnerabilities · Sep 27, 2026