Vulnerabilities

Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel.

Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft, Citrix

Product

Remote Desktop, NetScaler ADC / Gateway

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

Exposure class

Remote access, Edge / VPN / firewall

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-19490 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
2. 65
   CISA advisory CISA 9 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2025-25249CVE-2026-19490CVE-2026-87491+1 more Google Fortinet
3. 75
   KEV CISA KEV 9 Sep 2026

   Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

   KEV Fix available CVE-2026-20079 Cisco
4. 57
   KEV NVD 2 Aug 2026

   N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in…

   KEV Fix available CVE-2026-18577 N-able
5. 57
   KEV NVD 1 Aug 2026

   N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.

   KEV Fix available CVE-2026-18556 N-able