# Critical Citrix NetScaler authentication bypass prompts emergency patching

_Wednesday, August 19, 2026 at 12:48 PM EDT · Security, Infrastructure · Breaking · Tier 1 — Major_

![Critical Citrix NetScaler authentication bypass prompts emergency patching — Primary](https://www.rapid7.com/cdn/images/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp)

A security advisory published August 19 details CVE-2026-19490, a critical authentication-bypass flaw in Citrix NetScaler ADC and NetScaler Gateway. Rapid7 says the remotely exploitable issue has a CVSS v4.0 score of 9.3 and requires neither authentication, user interaction nor elevated privileges. Affected releases include NetScaler ADC and Gateway 14.1 before 14.1-73.32 and 13.1 before 13.1-63.21, along with specified FIPS and NDcPP versions. Rapid7 says it has not observed exploitation in the wild but advises emergency patching of affected systems.

## Sources

- [rapid7.com](https://www.rapid7.com/blog/post/etr-cve-2026-19490-critical-vulnerability-affecting-citrix-netscaler-adc-and-netscaler-gateway/)

---
Canonical: https://techandbusiness.org/newswire/JFRLEcImHUWyb2B2_X3uoA
Retrieved: 2026-08-20T04:12:39.293Z
Publisher: Tech & Business (techandbusiness.org)