CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports multiple actively exploited vulnerabilities added to its Known Exploited Vulnerabilities Catalog between September 27 and October 4, 2026. Affected products include Citrix NetScaler ADC/Gateway, Zammad, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, and Apple products. The Citrix alert describes critical zero-day vulnerabilities with confirmed global exploitation and potential remote code execution. Organizations should prioritize patching or mitigation, investigate for compromise, and apply risk-based vulnerability management, especially for internet-facing systems.