PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

bishopfox.com | vulnerability | CVE-2026-19490 | #authentication-bypass | #citrix | #netscaler | #patching | #bishop-fox | #cve-2026-19490
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
CVE
CVE-2026-19490
Published
Collected

Related coverage

vulnerability · bishopfox.com
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
Bishop Fox on CVE-2026-82329: a default Artifactory cluster join key anyone can derive, so one forged join request mints an admin token — CVSS 9.8, KEV-listed, fixed in 7.111.21.
vulnerability · bishopfox.com
No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452
Bishop Fox shows how to verify the Citrix NetScaler patch for CVE-2026-8452 from the outside: benign SAML requests reveal patch state without crashes, plus IOCs—and one crash signal that misleads.
vulnerability · bishopfox.com
Analysis and Exploitation of CVE-2023-3519
Bishop Fox analyzes and exploits CVE-2023-3519, the critical Citrix ADC RCE seen in the wild, pinpointing a simpler vulnerable function (ns_aaa_gwtest_get_event_and_target_names) via patch diffing.
vulnerability · bishopfox.com
Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched
Bishop Fox developed an exploit for CVE-2023-3519, an unauthenticated stack overflow in Citrix ADC Gateway granting RCE; roughly 53% of the 61,000 exposed appliances were unpatched.
Critical · vulnerability · github.com
CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation
This is a public pre-auth remote-code-execution PoC, and although offsets are hardcoded for a specific build, it materially lowers the exploitation barrier. NetScaler administrators should upgrade affected builds per the Citrix bulletin and restrict exposed Gateway/AAA surfaces; use the PoC only in explicitly authorized isolated environments.
blog · bishopfox.com
OOB Memory Read: Netscaler ADC and Gateway
Bishop Fox details an unauthenticated out-of-bounds memory read in Citrix NetScaler ADC and Gateway (CVE-2023-6549) that can leak prior POST request bodies; patched releases listed per CTX584986.
Back