LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
HIGH CWE-120

CVE-2026-19489

NetScaler ADC vulnerability

NetScaler·ADC

8.8/ 10
CVSS 4.0
High severity
0.43%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 38% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Aug 19, 2026
Updated
Aug 20, 2026
First covered
Aug 20, 2026
Latest story
3 months ago

Summary

Vulnerability in NetScaler ADC and NetScaler Gateway.This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Attack profile

Attack vectorNetwork
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionNone
ConfidentialityLow
IntegrityLow
AvailabilityHigh
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L

Affected products

  • NetScaler ADC14.1 to 73.3213.1 to 63.21
  • NetScaler Gateway14.1 to 73.3213.1 to 63.21

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorysupport.citrix.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed