Skip to content
Threat Feed
Subscribe

Product

NetScaler Gateway

3 briefs RSS
high advisory

Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

Citrix has released patches for critical vulnerabilities including CVE-2026-19490, an authentication bypass, and CVE-2026-19489, a memory overflow vulnerability affecting NetScaler ADC and Gateway appliances.

NetScaler ADC +3 vulnerability network-infrastructure authentication-bypass
2c updated
critical threat

Citrix NetScaler ADC and Gateway CVE-2026-3055 Exploitation

Threat actors are actively exploiting CVE-2026-3055, a critical memory overread vulnerability in Citrix NetScaler ADC and NetScaler Gateway appliances configured as a SAML identity provider (IDP), to extract sensitive information, including authenticated administrative session IDs, potentially leading to full system takeover.

PoC Langflow +4 citrix netscaler cve-2026-3055 memory-overread information-disclosure
2r 3t 5c 1i updated
high advisory

NetScaler ADC and Gateway Vulnerabilities Lead to Session Mixup

A race condition vulnerability in NetScaler ADC and Gateway (CVE-2026-3055 and CVE-2026-4368) could lead to user session mixup, potentially allowing unauthorized access to sensitive information.

NetScaler ADC +1 netscaler citrix session-hijacking vulnerability
2r 1t