CISA KEV

12 articles

ThreatsTechnology, Cloud & SaaSHigh
Citrix NetScaler Gateway Memory Buffer Overflow Added to CISA Known Exploited Catalog
CISA issued a binding directive on CVE-2026-8452, a high-severity memory buffer vulnerability in Citrix NetScaler ADC and Gateway appliances triggering perimeter denial of service.
Priya Raman14 Sept 20267 min read
ThreatsTechnology, Cloud & SaaSCritical
CISA Mandates Remediation for ownCloud Improper Authentication Flaw Under Active Exploitation
Federal agencies face urgent remediation deadlines as CISA confirms active exploitation of CVE-2023-49105, allowing attackers to access and delete cloud storage files without credentials.
Aisha Noor14 Sept 20267 min read
ThreatsTechnology, Cloud & SaaSCritical
CISA Adds Critical Linux Kernel IPv6 Privilege Escalation Flaw to KEV Catalog
CISA added CVE-2026-53362 to its KEV catalog, warning of active privilege escalation exploits targeting the Linux Kernel IPv6 networking subsystem across major enterprise distros.
Daniel Okafor14 Sept 20268 min read
ThreatsTechnology, Cloud & SaaSBreaking
Ivanti Patches Critical Remote Code Execution Flaw in Neurons for ITSM Infrastructure
Ivanti released emergency security patches addressing CVE-2026-12650, an unauthenticated deserialization RCE vulnerability in Neurons for ITSM on-premise deployments.
Priya Raman14 Sept 20268 min read
ThreatsTechnology, Cloud & SaaSBreaking
Citrix NetScaler CVSS 9.3 authentication bypass CVE-2026-19490 under active in-the-wild exploitation
CISA and threat researchers warn that CVE-2026-19490 in Citrix NetScaler ADC and Gateway is under active exploitation, granting unauthenticated access to perimeter gateways.
Daniel Okafor14 Sept 20266 min read
ThreatsTechnology, Cloud & SaaSBreaking
Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates
Threat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Daniel Okafor12 Sept 20266 min read
ThreatsIndustrial, OT & IoTCritical
MikroTrick exploit chain compromises MikroTik RouterOS devices as ScreenConnect client flaw hits KEV
CERT Polska discloses MikroTrick, an unauthenticated exploit chain hijacking MikroTik RouterOS devices, while CISA adds a dangerous ScreenConnect client condition to KEV.
Daniel Okafor12 Sept 20266 min read
ThreatsIndustrial, OT & IoTBreaking
SonicWall SMA1000 Zero-Day Chain Hit CISA KEV in Three Days. Patching Is the Easy Part
SonicWall disclosed two actively exploited SMA1000 flaws on 1 September; CISA set a 5 September federal deadline. The harder problem is proving an appliance you cannot instrument is clean.
Daniel Okafor11 Sept 20265 min read
ThreatsTechnology, Cloud & SaaSCritical
FortiClient EMS CVE-2026-35616: the hotfix window was not the dangerous part
Fortinet's emergency hotfix for CVE-2026-35616 blocked the attack path without fixing the flaw, and the complete patch that followed needed its own re-release.
Priya Raman10 Sept 20266 min read
ThreatsTechnology, Cloud & SaaSHigh
LiteLLM and Kestra in KEV: exploited AI tooling is now a vulnerability management problem
CISA added 15 CVEs to the KEV catalog in six working days, including exploited flaws in LiteLLM and Kestra — AI tooling that most asset inventories never see.
Daniel Okafor10 Sept 20266 min read
ThreatsGovernment & DefenceCritical
CISA adds 12 exploited CVEs to KEV in a single week, spanning Citrix, Cisco and Fortinet
Twelve fresh entries hit the Known Exploited Vulnerabilities catalog, covering Citrix NetScaler, Cisco FMC, Fortinet FortiOS, Adobe Commerce, N-able N-central and Chrome.
Daniel Okafor10 Sept 20266 min read
ThreatsTechnology, Cloud & SaaSCritical
N-able N-central Pre-Auth RCE Flaw Under Active Exploitation (CVE-2026-86218)
CISA issued an emergency KEV addition for CVE-2026-86218, an unauthenticated static code injection flaw in N-able N-central RMM servers actively exploited against MSP networks.
Daniel Okafor8 Sept 20265 min read