By David Hollingworth
Publication Date: 2026-08-24 06:06:00
Last week Citric disclosed a pair of vulnerabilities impacting its NetScaler ADC and NetScaler Gateway devices, and security researchers are urging the company’s customers to take urgent action on one of them.
CVE-2026-19489 and CVE-2026-19490 were disclosed on August 19, and while the former has a CVSS score of 8.8, the latter has a far more serious rating of 9.3.
You’re out of free articles for this month
While CVE-2026-19489 is a memory overflow vulnerability that could lead to unpredictable behaviour or Denial of Service, CVE-2026-19490 is an authentication bypass issue, and one that cyber security firm Rapid7 says should be addressed as a priority.
“NetScaler ADC and NetScaler Gateway are widely deployed enterprise networking products commonly positioned at or near the network perimeter,” Rapid7 said in a blog post on the same day.
“NetScaler ADC provides application delivery, traffic management, load balancing, SSL/TLS offloading, and…