CVE-2026-19490 is a critical security vulnerability in NetScaler ADC and NetScaler Gateway affecting versions 13.1 through 63.21 and 14.1 through 73.32. The CVSS 4.0 vector indicates the vulnerability is remotely exploitable over the network without authentication or user interaction, causing high impact on confidentiality, integrity, and availability. The vulnerability is classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). As of the published date, no official remediation or patch is available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authentication controls, potentially leading to unauthorized access and compromise of confidentiality, integrity, and availability of the affected NetScaler ADC and Gateway systems. Given the critical CVSS score and the nature of the vulnerability, the impact is severe for affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, organizations should monitor vendor communications closely for updates. Until a patch is available, consider restricting network access to affected devices and applying compensating controls as appropriate.