Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

bishopfox.com | vulnerability | CVE-2026-19490 | #authentication-bypass | #citrix | #netscaler | #patching | #bishop-fox | #cve-2026-19490

Summary

Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)
  2. No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 (bishopfox.com)
  3. Analysis and Exploitation of CVE-2023-3519 (bishopfox.com)
  4. Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched (bishopfox.com)
  5. CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation (github.com)
  6. OOB Memory Read: Netscaler ADC and Gateway (bishopfox.com)

back