CVE-2026-19490

Vendor

Microsoft, Citrix

Product

Remote Desktop, NetScaler ADC / Gateway

EPSS

1.00 (p100)

CISA KEV

listed

Exposure class

Remote access, Edge / VPN / firewall, Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 69
   KEV NVD 19 Aug 2026

   Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel.

   Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA…

   KEV Fix available CVE-2026-19490 Microsoft Citrix
2. 65
   CISA advisory CISA 9 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability…

   Exploited CVE-2025-25249CVE-2026-19490CVE-2026-87491+1 more Google Fortinet
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more