CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA’s September 2026 alerts report 23 vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include MikroTik RouterOS, Fortinet, Citrix NetScaler, Google Chromium, Cisco Firewall Management Center, Adobe Commerce/Magento, Microsoft Windows, N-able N-central, Sangoma Switchvox, Starlette, Kestra, LiteLLM, JFrog Artifactory, SonicWall SMA1000, PaperCut, ownCloud, and Linux Kernel. Organizations should prioritize urgent remediation, assess internet-exposed assets, and investigate potential compromise before patching