Detecting and Containing CVE-2026-19490: A Defender's Checklist for NetScaler SAML Bypass

CVE-2026-19490 is a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway, carrying a CVSS v4.0 score of 9.3. Tracked as CWE-288, the flaw occurs when a signature check fails open on a specific SAML processing path, allowing attackers to create sessions the appliance considers valid. Because these exploits do not trigger failed login logs, detection is difficult. Defenders must confirm if the SAML path is reachable to contain the threat.