CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reported additions to its Known Exploited Vulnerabilities (KEV) Catalog between September 21 and 27, 2026, citing evidence of active exploitation. The entries affect Citrix NetScaler, WordPress Core, Microsoft SharePoint, MikroTik RouterOS, WSO2, Adobe Commerce/Magento, Check Point products, Arista VeloCloud Orchestrator, F5 BIG-IP APM, Zyxel GS1900 switches, and the Linux kernel. Organizations should prioritize rapid remediation, assess internet-facing systems, and investigate potential compromise before patching, consistent with CISA risk-based vulnerability management guidance and BOD