CISA Mandates Federal Agencies Patch Exploited Cisco, Citrix, and Fortinet Vulnerabilities by September 12

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities affecting Cisco Secure Firewall Management Center, Citrix NetScaler ADC/Gateway, and Fortinet FortiOS/FortiSwitchManager/FortiSASE to its Known Exploited Vulnerabilities catalog. Federal Civilian Executive Branch agencies are required to apply patches by September 12, 2026, due to active exploitation efforts, including the deployment of Qilin ransomware.