Attackers have begun actively targeting a critical-severity Citrix NetScaler vulnerability tracked as CVE-2026-19490, according to vulnerability intelligence company Previdian. The flaw allows unprivileged threat actors to remotely bypass authentication when a NetScaler appliance is configured as an AAA virtual server or as a Gateway, including SSL VPN, ICA Proxy, CVPN,