CISA Adds Actively Exploited Flaws to KEV Catalog, Sets Patch Deadline

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in Cisco Secure Firewall Management Center, Citrix NetScaler ADC, and a Fortinet product. These vulnerabilities are actively exploited, prompting CISA to mandate that Federal Civilian Executive Branch agencies apply patches by September 12, 2026. This action highlights urgent cybersecurity risks for government systems.