CISA Adds One Known Exploited Vulnerability to Catalog
2026-10-09T21:24:03Z•0cd4c60c76bfd3cabb688a57945ec0bf38c2324dd375396c20e9f3ac8d5805f8
CVE-2026-102489CVE-2026-102490CVE-2026-104286CVE-2026-107406CVE-2026-76504CVE-2026-86950CVE-2026-88771CVE-2026-88772CVE-2026-88773CVE-2026-88774CVE-2026-88775CVE-2026-88776CVE-2026-88777CVE-2026-88778CVE-2026-88779AppleBOD 26-04CISA KEVCisco Catalyst SD-WAN ManagerCitrix NetScalerFortinet FortiMailNetScaler ADCNetScaler GatewayZammadactive exploitationimproper input validationincident responseknown exploited vulnerabilitymemory buffer vulnerabilityout-of-bounds writepath traversalprivilege managementsession fixationvulnerability remediationzero-day
What happened
CISA reports active exploitation of multiple vulnerabilities and adds them to the Known Exploited Vulnerabilities (KEV) Catalog. Affected products include Citrix NetScaler ADC/Gateway, Zammad, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, and Apple products. Organizations should prioritize urgent patching, assess exposed systems for compromise, and apply relevant vendor and CISA guidance, particularly for Citrix NetScaler vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 0cd4c60c76bfd3cabb688a57945ec0bf38c2324dd375396c20e9f3ac8d5805f8
- Enrichment time
- 2026-10-09T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.