Critical Vulnerabilities in NetScaler ADC and Gateway Under Active Exploitation

The Cyber Security Agency of Singapore (CSA) has issued an advisory regarding critical vulnerabilities (CVE-2026-19490 and CVE-2026-19489) in NetScaler ADC and NetScaler Gateway that are reportedly being actively exploited. CVE-2026-19490, with a CVSS v4.0 score of 9.3, allows an unauthenticated attacker to bypass authentication and compromise an affected system. CVE-2026-19489, with a score of 8.8, can lead to a memory overflow and denial of service. Users and administrators are urged to update to the latest versions immediately to mitigate these risks.