CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog in late September 2026, indicating active exploitation. Affected products include Citrix NetScaler ADC/Gateway, Cisco Catalyst SD-WAN Manager, Apple products, WordPress Core, Microsoft SharePoint, MikroTik RouterOS, WSO2 products, Adobe Commerce/Magento, and others. The Citrix NetScaler issues include critical zero-days capable of independent remote code execution. Organizations should prioritize remediation, investigate for compromise before patching where feasible, and follow vendor and CISA IRAN