{"vulnerability": "cve-2026-1948", "sightings": [{"uuid": "9b95ea14-48c1-45de-9837-2b2c71f075dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/62e6117f-a479-4d22-91a0-5d7cdda9ca0b", "content": "", "creation_timestamp": "2026-08-20T06:31:52.482701Z"}, {"uuid": "a21a93f3-aea6-4991-a45c-a38cb74da586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490\n\n#CRITICAL\n\nsupport.citrix.com/support-home...", "creation_timestamp": "2026-08-19T13:38:22.176162Z"}, {"uuid": "6dedd42a-947b-4b6f-ae0d-c047c910cecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.", "creation_timestamp": "2026-08-21T01:00:34.756474Z"}, {"uuid": "af3d737b-4b8b-436e-95e0-623387556ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "", "creation_timestamp": "2026-08-20T08:15:03.838201Z"}, {"uuid": "934943de-39e2-4f5e-a63c-5ff12786a5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/kritisk-sarbarhet-i-citrix-netscaler", "content": "", "creation_timestamp": "2026-08-20T12:45:09.982115Z"}, {"uuid": "48e0b1bc-d5da-4e3a-a92a-22898b51eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtjh4pdrvw2f", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:00.838588Z"}, {"uuid": "063c9174-3f0e-4b72-aa14-320de58add0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mtjh5ysq6j2a", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:48.999992Z"}, {"uuid": "f54437ee-9353-4c43-8cb0-1e9cbf4b23b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6ty4r42d", "content": "\ud83d\udd17 CVE : CVE-2026-19489, CVE-2026-19490", "creation_timestamp": "2026-08-20T14:25:11.902716Z"}, {"uuid": "e1f1f5dc-1221-442f-bfe3-1bb34c71092b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtjh7ftf4b2n", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:25:31.660522Z"}, {"uuid": "cfba7912-f34f-49cf-8960-d89b4bf41c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-23", "content": "", "creation_timestamp": "2026-08-19T18:17:45.882417Z"}, {"uuid": "51eba80b-4eb9-4358-84d5-77b3bc99ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19481", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxamlgd722l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19481: @fastify/busboy vulnerable to denial of service via prototype-named multipart part header\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T08:39:42.961130Z"}, {"uuid": "179b6967-e88c-4703-afe5-453c7df5ee54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-833", "content": "", "creation_timestamp": "2026-08-19T20:15:06.127523Z"}, {"uuid": "1433d15f-dc45-453b-bfff-ae62d1b89a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxbtcdfrk2l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19484: @fastify/busboy vulnerable to denial of service via oversized multipart boundary\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T09:01:22.471026Z"}, {"uuid": "a69032ae-ae8c-4859-bf7e-171c1ae22992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtltynmvdr2u", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 #patchmanagement", "creation_timestamp": "2026-08-21T13:19:42.222280Z"}, {"uuid": "8d21789b-bcf4-48f8-b7b6-6e3ab16a0622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtjvq34kva2e", "content": "Citrix flags urgent NetScaler patching for CVE-2026-19490 and CVE-2026-19489, which can enable auth bypass and denial of service on specific setups. CISA still tracks prior Citrix flaws in KEV. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-08-20T18:45:22.977846Z"}, {"uuid": "4120f02e-e620-4082-af2b-87b8a65bb4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msxrglp6u42g", "content": "@fastify/busboy 3.1.0-3.2.0\u3067\u3001\u7d30\u5de5\u3055\u308c\u305f\u5883\u754c\u9577\u3092\u6301\u3064\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u308a\u3001Node.js\u30a4\u30d9\u30f3\u30c8\u30eb\u30fc\u30d7\u304c\u505c\u6b62\u3059\u308b\u53ef\u80fd\u6027\u3002CPU\u3092\u5360\u6709\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3059\u3002\nCVE-2026-19484 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19484", "creation_timestamp": "2026-08-13T13:40:34.038933Z"}, {"uuid": "baf6b011-1084-44a9-8aad-dadba7aa6132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19487", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/cye5l3eestfcw", "content": "CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass", "creation_timestamp": "2026-08-13T20:46:34.899216Z"}, {"uuid": "c9a3b00f-caee-49fd-a3cd-09bbb8771145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muprnkqfbk2w", "content": "~Cybergcca~\nPatch Chrome and NetScaler urgently; CVE-2026-85046 is exploited, while NetScaler flaws enable authentication bypass or denial of service.\n-\nIOCs: CVE-2026-85046, CVE-2026-19490, CVE-2026-19489\n-\n#CVE202619490 #CVE202685046 #ThreatIntel", "creation_timestamp": "2026-09-04T20:13:33.357060Z"}, {"uuid": "7cb34747-ecb9-4173-8354-cd2bae5f9956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-019-vulnerabilities-impacting-citrix-netscaler-adc-netscaler-gateway-cve-2026-19490-cve-2026-19489", "content": "", "creation_timestamp": "2026-09-04T20:15:05.788839Z"}, {"uuid": "f9e13416-2739-4d04-8689-b4d0d550eb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muyfpls77p25", "content": "Here we go again with NetScaler ADC and Gateway users being delightfully targeted by actively exploited auth bypass bugs CVE-2026-19490 and CVE-2026-19489. Apparently, authenticating properly is just an unnecessary nuisance for attackers hoping to compromise your prized systems. ...\n\nRead full story", "creation_timestamp": "2026-09-08T06:33:54.661201Z"}, {"uuid": "0786b9cd-7f08-4127-9ef3-57c0db48aa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4cimsmsmy7wyj", "content": "CVE-2026-19486 - SSRF in Gemini Enterprise Agent Platform App Builder\nCVE ID : CVE-2026-19486\n \n Published : Sept. 11, 2026, 8:18 a.m. | 42\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Buil...", "creation_timestamp": "2026-09-11T09:57:57.386668Z"}, {"uuid": "a1c1071d-cff3-49c1-977e-21613b1c6270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw4i3gr5c26", "content": "\u300cNetScaler ADC/Gateway\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u91cd\u8981\u5ea6\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\n\n\u300cNetScaler ADC\uff08\u65e7Citrix ADC\uff09\u300d\u300cNetScaler Gateway\uff08\u65e7Citrix Gateway\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u91cd\u8981\u5ea6\u306f\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u3066\u304a\u308a\u3001\u5229\u7528\u8005\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\nCloud Software Group\u306f\u73fe\u5730\u6642\u95938\u670819\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u300cCVE-2026-19490\u300d\u300cCVE-2026-19489\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u91cd\u8981\u5ea6\u30924\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critica...", "creation_timestamp": "2026-09-20T02:08:31.690419Z"}]}