Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

The document aggregates September 2026 cybersecurity reporting, including multiple critical vulnerabilities under active exploitation, malware campaigns, supply-chain compromises, credential theft, cloud isolation issues, and attacks against enterprise platforms. Highest-risk items include Citrix NetScaler zero-day RCEs, Oracle PeopleSoft, WordPress, SharePoint, WSO2, Adobe Commerce, and Roundcube vulnerabilities, as well as ClickFix malware delivery and compromised GitHub Actions. Several vulnerabilities are listed with CVE identifiers and CISA KEV or in-the-wild exploitation status.