CISA Adds Six Exploited Flaws to KEV Catalog, Urges Agencies to Patch NetScaler, Linux, and SQL Server Bugs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity flaw in Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-8452) that is actively being exploited. Other critical flaws include a remote code execution vulnerability in Microsoft SQL Server (CVE-2019-1068) and various Linux kernel issues. CISA is urging federal agencies to apply fixes by specific deadlines in late August and early September 2026.