CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports active exploitation of multiple newly cataloged vulnerabilities from September 25 through October 1, 2026. Affected products include Citrix NetScaler ADC/Gateway, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, Apple products, WordPress Core, Microsoft SharePoint, and MikroTik RouterOS. The Citrix NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772 are described as critical zero-days capable of independent remote code execution and are being exploited globally. CISA urges organizations to prioritize remediation, investigate potential compromise before patching, and use—