Keyword

authentication-bypass

1 dispatch · latest 10 SEP 2026 · all keywords →

exploits

Your NetScaler Just Handed Out Free VPN Passes to Anyone on the Internet: CVE-2026-19490 Is on KEV

An unauthenticated auth bypass in Citrix NetScaler ADC/Gateway landed on CISA's KEV catalog with a Sep 12 due date and a forensic-triage requirement. The vendor published exact config strings to grep before you patch.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.3Exploited in the wildKEV due 12 SEP 2026CVE-2026-19490 +2
citrixnetscalervpn