CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog in September 2026. The advisories cover Apple products, Citrix NetScaler ADC/Gateway—including critical zero-days enabling remote code execution—WordPress, Microsoft SharePoint, MikroTik RouterOS, WSO2, Adobe Commerce/Magento, Check Point products, Arista VeloCloud Orchestrator, and F5 BIG-IP. Organizations should prioritize remediation, assess internet-exposed systems, and check for compromise before patching where feasible.