CVE-2026-19490: NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
Published Aug 19, 2026
·Updated
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
Affected Software
2 affected components
Citrix NetScaler ADC>=13.1<63.21, >=14.1<73.32
Citrix NetScaler Gateway>=13.1<63.21, >=14.1<73.32
Event History
Aug 19, 2026
CVE Published
via MITRE·12:54 PM
Data Sourced
via MITRE·12:54 PM
Description
Data Sourced
via NVD·01:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are in scope based on the affected-version information?
NetScaler ADC deployments from 14.1 through 73.32 and from 13.1 through 63.21 are affected. The same version ranges are listed for NetScaler Gateway.
2
Does the available information indicate whether default configurations are vulnerable or whether exploitation requires authentication?
No. The provided information does not state configuration prerequisites, network exposure requirements, or whether an attacker must authenticate.
3
What mitigations are available if an update cannot be applied immediately?
The provided information does not include temporary mitigations or compensating controls. It only identifies the affected NetScaler ADC and NetScaler Gateway version ranges.