Topic

Remote access gateways

Internet-facing appliances such as VPN and application delivery gateways that give staff access to internal networks and applications.

Current clusters

security1 publisher

Build number and SAML settings decide exposure to exploited NetScaler flaw CVE-2026-19490

Exposure to CVE-2026-19490, a CVSS 9.8 NetScaler bypass CISA lists as exploited, depends on each appliance's exact build and SAML setup. Older builds qualify with any Gateway or AAA virtual server, while later builds short of the fix also need a SAML action configured.

Publishers:horizon3.ai

Reality

Evidence55
Adoption: Insufficient
Hype gap+5
Incentives70
Confidence55

product2 publishers

CISA wants NetScaler owners to check for intruders before installing Citrix's zero-day fixes

Citrix has fixed two NetScaler ADC and Gateway flaws, each rated 9.5 out of 10, that attackers were exploiting before any patch existed. CISA wants owners to look for signs of compromise first because the update can erase the evidence, so the upgrade comes second.

Publishers:techradar.comthenextweb.com

Reality

Evidence72
Adoption: Insufficient
Hype gap+5
Incentives: Insufficient
Confidence70