Keyword

netscaler

2 dispatches · latest 10 SEP 2026 · all keywords →

10 SEP 2026exploits

Your NetScaler Just Handed Out Free VPN Passes to Anyone on the Internet: CVE-2026-19490 Is on KEV

An unauthenticated auth bypass in Citrix NetScaler ADC/Gateway landed on CISA's KEV catalog with a Sep 12 due date and a forensic-triage requirement. The vendor published exact config strings to grep before you patch.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.3Exploited in the wildKEV due 12 SEP 2026CVE-2026-19490 +2

citrix netscaler vpn

28 AUG 2026exploits

Citrix Calls It a DoS. Researchers Call It Pre-Auth RCE. Your NetScaler Is on KEV Either Way

CVE-2026-8452 is a Citrix NetScaler flaw the vendor rated as high-severity DoS, but watchTowr Labs demonstrated unauthenticated RCE. CISA added it to KEV Aug 26 with a Saturday due date.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 8.8Exploited in the wildKEV due 29 AUG 2026CVE-2026-8452 +1

citrix netscaler rce