Signalis
sign in--:--:--UTC
CVEs

CVE-2026-19490

exploited in the wild☆ pin
CVSS
10.0
Reports
16
First seen
Aug 19, 2026
Last seen
Oct 2, 2026
Affected product

Citrix NetScaler ADC and NetScaler Gateway

Associated actors

Fire Ant ×2Clop ×1EvilTokens ×1Iran-linked threat actor ×1Rhysida ×1Russian-speaking threat actor ×1ShinyHunters ×1StopAndProtect campaign operators ×1TeamPCP ×1Carbonato ×1UTA0565 ×1

Recent reports

High

Cyber Brief 26-10 – September 2026

CERT-EU Threat IntelCritical

CISA Orders Federal Agencies to Patch Exploited Citrix NetScaler Flaws by September 30

Bleeping ComputerCritical

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Bleeping ComputerCritical

Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

The Hacker NewsCritical

CISA Adds Exploited Cisco, Citrix, Fortinet Flaws to KEV Catalog; Sets Sept. 12 Federal Patch Deadline

The Hacker NewsMedium

Citrix NetScaler ADC and Gateway Authentication Bypass and DoS Vulnerabilities

HKCERTHigh

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesCritical

Citrix NetScaler ADC and Gateway Authentication Bypass and Buffer Overflow Vulnerabilities

Canadian Centre AlertsCritical

Critical Citrix NetScaler authentication bypass exploited in active attacks

Bleeping ComputerHigh

NetScaler ADC and NetScaler Gateway Authentication Bypass Vulnerability (CVE-2026-19490)

NICS TaiwanHigh

CISA orders federal agencies to patch Citrix NetScaler RCE flaw by Saturday

Bleeping ComputerHigh

Check Point Threat Intelligence Report – 24 August 2026

Check Point ResearchCritical

Critical NetScaler Authentication Bypass Vulnerability (CVE-2026-19490)

The Hacker NewsHigh

Citrix urges admins to patch new NetScaler flaws as soon as possible

Bleeping ComputerHigh

Multiple Vulnerabilities in Citrix NetScaler ADC and Gateway Products

GovCERT.HKCritical

Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

CERT-EU Advisories

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans