[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftQ0vLlyyRL9ABQJXu1SIqNeGVWS9ycrQPfY7FPvIZ3I":3},{"article":4,"iocs":43,"watch_terms":51,"solutions":52,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"93a097a7-16a3-49ba-8bd4-93ddb6f4a842","Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers","critical-netscaler-flaw-can-bypass-authentication-on-certain-gateway-and-aaa-ser-88c895","Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler Gateway, including certain FIPS and NDcPP builds, as well as SecurAccess","Citrix has released updates to fix two security flaws in NetScaler ADC and NetScaler Gateway, including a critical authentication bypass vulnerability (CVE-2026-19490). This flaw, with a CVSS score of 9.3, affects appliances configured as Gateways or AAA virtual servers under specific conditions, particularly when SAML actions are involved. A separate memory overflow vulnerability (CVE-2026-19489) also exists, potentially causing DoS.","Critical NetScaler flaw allows authentication bypass on certain Gateway and AAA servers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fcritical-netscaler-flaw-can-bypass.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEgoCXrYMA_j7aJrrdIZKt2gQwTWYXhhHZTfBvrNcgpLLBTa5hzcmDNguBKwBhiD8p7kO5K2OeQYVbIPg2HHDBwu9LNzR6oAFE-znmFWIgjY_XzA0qdy-rA8XzV_uGvsxLWRNXCyyOlUKdDV0LGrXPN15wxYsTuZslyecGQ1cqE2OKdX5cocpp74uXenwdj0\u002Fs1600\u002Fcitrix.jpg","2026-08-20T13:35:13+00:00","2026-08-20T16:00:09.19382+00:00",9,[17,20,22,25,28],{"name":18,"type":19},"NetScaler ADC","product",{"name":21,"type":19},"NetScaler Gateway",{"name":23,"type":24},"Citrix","vendor",{"name":26,"type":27},"ZTNA","technology",{"name":29,"type":27},"SAML","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44,48],{"type":45,"value":46,"context":47},"cve","CVE-2026-19489","Memory overflow vulnerability impacting NetScaler ADC and Gateway with SIP ALG enabled on LSN group.",{"type":45,"value":49,"context":50},"CVE-2026-19490","Critical authentication bypass vulnerability affecting NetScaler ADC and Gateway configured as Gateway or AAA virtual server.",[23,18,21],{"controls":53,"vendors":137},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":84,"name":85,"problem":86,"products":87},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":113,"name":114,"problem":115,"products":116},"patch-management","Automated patch management","Known holes get closed in days, not months.",[117,125,130],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":126,"product_name":127,"url":128,"description":129},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":113,"product_name":134,"url":135,"description":136},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[138],{"slug":139,"name":23,"logo_path":140,"roles":141},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[142],"affected",{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":159},"critical-citrix-netscaler-auth-bypass-demands-immediate-patching","Critical Citrix NetScaler Auth Bypass Demands Immediate Patching","A critical authentication bypass vulnerability (CVE-2026-19490, CVSS 9.3) in Citrix NetScaler ADC and Gateway allows attackers to circumvent authentication controls on appliances configured as Gateway or AAA virtual servers, particularly when SAML actions are enabled. This type of flaw is especially dangerous because it targets the authentication layer itself — the primary mechanism organizations rely on to gatekeep access to internal resources. The specific configuration conditions (SAML-based actions) highlight how non-default or complex identity configurations can introduce unexpected attack surfaces. Left unpatched, this vulnerability could grant unauthorized actors full access to protected internal applications and networks. The accompanying DoS vulnerability (CVE-2026-19489) compounds the risk by potentially disrupting availability of critical network infrastructure.",[148,149,150,151,152,153,154,155,156,157,158],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IA-2: Identification and Authentication","NIST SP 800-53 CM-6: Configuration Settings","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ITIL: Change Management \u002F Emergency Change procedures","GDPR Article 32: Security of Processing (where EU personal data is accessible via affected gateways)",{}]