---
title: "Security digest: August 19, 2026"
url: https://erroneo.us/security/2026-08-19/
description: "August 19, 2026 vulnerability digest: 1 brief (NetScaler CVE-2026-19490: Exploited Gateway Auth…); 1 CISA KEV addition (MLflow). What to patch and who can…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-08-19
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: August 19, 2026

1 editorial brief and 1 known exploited (cisa kev) addition.

## Take stock

- Act now: NetScaler CVE-2026-19490: Exploited Gateway Auth Bypass . Teams running NetScaler ADC or Gateway 14.1 before 14.1-73.32, 13.1 before 13.1-63.21 or the FIPS/NDcPP equivalents with a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA vserver, especially with a SAML action configured.
- Do you run any of these? MLflow MLflow. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-09-02.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Act now** [NetScaler CVE-2026-19490: Exploited Gateway Auth Bypass](https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-19490-gateway-aaa-auth-bypass/index.md): Any customer-managed NetScaler with a Gateway or AAA virtual server on an August-or-older build should be upgraded today, straight to the current builds, because this bypass is being tried in the wild and later exploited NetScaler bugs are fixed in the same upgrade.

## Known exploited (CISA KEV)

- [CVE-2026-64849](https://erroneo.us/security/cve/CVE-2026-64849/index.md) MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability (CISA due 2026-09-02)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2026-08-19/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt