A high-severity authentication bypass vulnerability has been identified in Citrix NetScaler ADC and NetScaler Gateway. Tracked as CVE-2026-19490, this issue allows unauthenticated remote threat actors to bypass authentication under specific configurations.
Because network infrastructure appliances are critical perimeter defenses, understanding this advisory helps site owners and small-business IT teams evaluate their exposure and prioritize necessary updates.
What Happened
Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When a NetScaler appliance is configured in certain ways, the flaw can be triggered remotely without authentication.
According to official advisories, this vulnerability affects appliances configured as:
- AAA virtual servers
- Gateway (SSL VPN)
- ICA Proxy
- CVPN (Clientless VPN)
- RDP Proxy
Additionally, this issue is actively monitored and has been added to CISA's Known Exploited Vulnerabilities list, meaning organizations should treat it with high urgency.
Who Should Care
Small businesses and organizations using Citrix NetScaler products for remote access, virtual private networks, or traffic management need to pay close attention. Even if your business relies on an external IT provider to manage perimeter devices, confirming that your infrastructure is secure is essential for maintaining overall network integrity.
What to Do Now
If your organization uses NetScaler ADC or NetScaler Gateway in any of the vulnerable configurations, immediate action is required:
- Review Your Configurations: Check whether your NetScaler appliances utilize AAA virtual servers, SSL VPN, ICA Proxy, CVPN, or RDP Proxy.
- Consult Vendor Guidance: Visit the official Citrix security advisories to identify the specific remediation steps and updates provided for your deployment.
- Verify Perimeter Security: Ensure your external-facing assets are properly inventoried and monitored.
Want to check your public-facing assets for other potential risks? Run a free check at Korisec to scan your website and internet-facing infrastructure today.