Citrix has released security updates to address security vulnerabilities (CVE-2026-19489, CVE-2026-19490) in NetScaler ADC and NetScaler Gateway products. An attacker could exploit some of these vulnerabilities to trigger memory leak, security restriction bypass and denial of service condition on the targeted system. Issues affect:

• NetScaler ADC and NetScaler Gateway 14.1 before version 14.1-73.32
• NetScaler ADC and NetScaler Gateway 13.1 before version 13.1-63.21
• NetScaler ADC FIPS before version 14.1-73.32 FIPS
• NetScaler ADC FIPS and NDcPP before version 13.1-37.277

More information on vulnerabilities and updates is available in Citrix Security Bulletins:

• CTX696939