CVE-2026-19490

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

CVSS 4.0

9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2026-09-09, due 2026-09-12

CWE

CWE-288

Published

2026-08-19

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• citrix:netscaler_application_delivery_controller
• citrix:netscaler_gateway

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19490

Check your stackJSON