{"vulnerability": "cve-2026-1948", "sightings": [{"uuid": "9b95ea14-48c1-45de-9837-2b2c71f075dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/62e6117f-a479-4d22-91a0-5d7cdda9ca0b", "content": "", "creation_timestamp": "2026-08-20T06:31:52.482701Z"}, {"uuid": "a21a93f3-aea6-4991-a45c-a38cb74da586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490\n\n#CRITICAL\n\nsupport.citrix.com/support-home...", "creation_timestamp": "2026-08-19T13:38:22.176162Z"}, {"uuid": "6dedd42a-947b-4b6f-ae0d-c047c910cecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.", "creation_timestamp": "2026-08-21T01:00:34.756474Z"}, {"uuid": "af3d737b-4b8b-436e-95e0-623387556ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "", "creation_timestamp": "2026-08-20T08:15:03.838201Z"}, {"uuid": "934943de-39e2-4f5e-a63c-5ff12786a5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/kritisk-sarbarhet-i-citrix-netscaler", "content": "", "creation_timestamp": "2026-08-20T12:45:09.982115Z"}, {"uuid": "48e0b1bc-d5da-4e3a-a92a-22898b51eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtjh4pdrvw2f", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:00.838588Z"}, {"uuid": "063c9174-3f0e-4b72-aa14-320de58add0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mtjh5ysq6j2a", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:48.999992Z"}, {"uuid": "f54437ee-9353-4c43-8cb0-1e9cbf4b23b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6ty4r42d", "content": "\ud83d\udd17 CVE : CVE-2026-19489, CVE-2026-19490", "creation_timestamp": "2026-08-20T14:25:11.902716Z"}, {"uuid": "e1f1f5dc-1221-442f-bfe3-1bb34c71092b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtjh7ftf4b2n", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:25:31.660522Z"}, {"uuid": "cfba7912-f34f-49cf-8960-d89b4bf41c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-23", "content": "", "creation_timestamp": "2026-08-19T18:17:45.882417Z"}, {"uuid": "51eba80b-4eb9-4358-84d5-77b3bc99ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19481", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxamlgd722l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19481: @fastify/busboy vulnerable to denial of service via prototype-named multipart part header\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T08:39:42.961130Z"}, {"uuid": "179b6967-e88c-4703-afe5-453c7df5ee54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-833", "content": "", "creation_timestamp": "2026-08-19T20:15:06.127523Z"}, {"uuid": "1433d15f-dc45-453b-bfff-ae62d1b89a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxbtcdfrk2l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19484: @fastify/busboy vulnerable to denial of service via oversized multipart boundary\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T09:01:22.471026Z"}, {"uuid": "a69032ae-ae8c-4859-bf7e-171c1ae22992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtltynmvdr2u", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 #patchmanagement", "creation_timestamp": "2026-08-21T13:19:42.222280Z"}, {"uuid": "8d21789b-bcf4-48f8-b7b6-6e3ab16a0622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtjvq34kva2e", "content": "Citrix flags urgent NetScaler patching for CVE-2026-19490 and CVE-2026-19489, which can enable auth bypass and denial of service on specific setups. CISA still tracks prior Citrix flaws in KEV. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-08-20T18:45:22.977846Z"}, {"uuid": "4120f02e-e620-4082-af2b-87b8a65bb4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msxrglp6u42g", "content": "@fastify/busboy 3.1.0-3.2.0\u3067\u3001\u7d30\u5de5\u3055\u308c\u305f\u5883\u754c\u9577\u3092\u6301\u3064\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u308a\u3001Node.js\u30a4\u30d9\u30f3\u30c8\u30eb\u30fc\u30d7\u304c\u505c\u6b62\u3059\u308b\u53ef\u80fd\u6027\u3002CPU\u3092\u5360\u6709\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3059\u3002\nCVE-2026-19484 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19484", "creation_timestamp": "2026-08-13T13:40:34.038933Z"}, {"uuid": "baf6b011-1084-44a9-8aad-dadba7aa6132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19487", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/cye5l3eestfcw", "content": "CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass", "creation_timestamp": "2026-08-13T20:46:34.899216Z"}]}