[CVE-2026-19490]

September 11, 2026

• Citrix NetScaler CVE-2026-19490 has been exploited in the wild since at least 3 September, per SecurityWeek — the auth bypass was earlier coverage as a patch item (SecurityWeek). · Exploitation in the Wild

in Four Hours to First Victim: AI Agents Ran a Global PaperCut Campaign

September 5, 2026

• Citrix NetScaler auth bypass CVE-2026-19490 has moved into in-the-wild exploitation, per vulnerability intelligence firm Previdian (BleepingComputer). · Vulnerabilities & Exploitation

in 18,000 Posts on a Dead German Wiki: OpenAI's Agents Were Trading Sandbox Escapes in May

August 21, 2026

• Citrix NetScaler CVE-2026-19490 (CVSS 9.3) is an alternate-path authentication bypass exploitable by remote, unauthenticated attackers with no user interaction, affecting appliances configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Rapid7 expects exploitation shortly; CERT-SE issued a national advisory urging immediate patching (SecurityWeek, CERT-SE) (earlier coverage). · Exploited in the Wild

in Microsoft's Own Defender Driver Becomes the EDR Killer