CVE-2026-19490: citrix netscaler_application_delivery_controller, citrix netscaler_gateway

CVSS 9.8 (critical) · listed as exploited by CISA since 2026-09-09 · published 2026-08-19

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

Affected products (NVD): citrix netscaler_application_delivery_controller, citrix netscaler_gateway

Fixed in (NVD): 13.1-37.277, 13.1-63.21, 14.1-73.32

Weakness: CWE-288

Source: NVD CVE-2026-19490

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19490

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.