Multiple Critical Vulnerabilities Actively Exploited, Including Zimbra Servers and Citrix NetScaler Flaw

Several significant cybersecurity threats were highlighted in a recent review. Unpatched Zimbra servers are actively being exploited via CVE-2026-73570, with at least 274 internet-facing instances compromised. Additionally, CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a previously patched Citrix NetScaler ADC and Gateway flaw (CVE-2026-8452) and a critical code injection vulnerability in the Gitea Git platform (CVE-2026-60004), both of which are being actively exploited in the wild.