Citrix NetScaler Vulnerability - 20260907003¶
Overview¶
Citrix has published a security bulletin relating to vulnerabilities discovered in NetScaler ADC and NetScaler Gateway. A remote attacker may be able to bypass authentication using an alternate path and gain unauthorised access to affected services when specific configurations are present.
What is vulnerable?¶
| Product(s) Affected | Version(s) | CVE | CVSS | Severity |
|---|---|---|---|---|
| NetScaler ADC NetScaler Gateway |
-14.1 before 14.1-73.32 -13.1 before 13.1-63.21 -14.1 FIPS before 14.1-73.32 FIPS -13.1 FIPS / NDcPP before 13.1-37.277 |
CVE-2026-19490 | 9.3 | Critical |
What has been observed?¶
The WA SOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.
Recommendation¶
The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):