On Wednesday, the U.S This article explores vulnerability citrix netscaler. . Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) catalog.
CVE-2026-20079 (CVSS score: 10.0) - A vulnerability in the Cisco Secure Firewall Management Center (FMC) Software that enables an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device, potentially gaining root access to the underlying operating system. CVE-2026-19490 (CVSS score: 9.3) - A vulnerability in the Citrix NetScaler ADC and NetScaler Gateway, which can occur when the appliance is set up as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy).
CVE-2025-25249 (CVSS score: 7.3) - A heap-based buffer overflow vulnerability in Fortinet FortiOS, FortiSwitchManager, and FortiSASE, allowing a remote unauthenticated attacker to execute arbitrary code or commands through specific request crafting. "Once the actor took control of the router, it became a vantage point for monitoring traffic traveling through secure network paths." CVE-2026-19490 has reported a surge in exploitation attempts against Previdian's honeypot systems, with a total of 56 attempts noted since September 3, 2026.
An auto-mode flag allows for autonomous operations, automatically executing a predefined command sequence upon initial infection." The results once again highlight that threat actors are constantly scanning exposed perimeter edge devices to gain initial access through their lack of robust monitoring and logging.
