Citrix urges admins to patch new NetScaler flaws as soon as possible

Two critical vulnerabilities in Citrix NetScaler ADC and Gateway — one enabling unauthenticated authentication bypass (CVE-2026-19490) and another causing denial-of-service via memory overflow (CVE-2026-19489) — expose organizations to severe risk if left unpatched. Internet-facing network appliances like ADC and gateway devices are high-value targets because they sit at the perimeter and handle authentication for critical services. The authentication bypass flaw is particularly dangerous as it requires no credentials, meaning any attacker on the internet could potentially gain unauthorized access. Delayed patching of perimeter devices dramatically increases the attack surface and can lead to full network compromise or service disruption.