CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA alerts from August 27 through September 9, 2026 report 26 vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include Fortinet, Citrix NetScaler, Chromium, Cisco FMC, Microsoft Windows, Adobe Commerce/Magento, N-able N-central, SonicWall, PaperCut, JFrog Artifactory, Linux, ownCloud, SQL Server, and others. Organizations should prioritize patching, assess internet-facing assets, and investigate possible compromise before remediation, consistent with CISA risk-based guidance and BOD 26-04.