Exploit for CVE-2026-19490

cve · 2026-08-19

Description

CVE-2026-19490 affects NetScaler ADC and Gateway versions 13.1-63.21 and 14.1-73.32.

Entry point

ParameterSAMLResponse · query param

Path/cgi/samlauth

Unauthenticated session forgery via SAML redirect binding on GET /cgi/samlauth (SAMLResponse/RelayState in query) used to mint forged sessions in vulnerable configurations.

CVSS 9.3 for CVE-2026-19490

9.3

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:L/VI:H/SI:L/VA:H/SA:L

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

3.4%higher than 87.9% of all CVEs

Updated 2026-09-05

CVE Information

CVE-2026-19490

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939

Exploit Details

Modified:2026-09-01 21:03

Last Seen:2026-09-01 21:05

Reporter:NetScaler

Other exploits for CVE-2026-19490

Exploit for CVE-2026-19490

2026-09-02 TarPeg007GITHUB

CVE-2026-19490

2026-09-02 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=CVE-2026-19490
Vulnerability in NetScaler ADC and NetScaler Gateway.

This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

Exploit Code

Share

Share on social media: