CISA Issues Urgent Deadlines for Critical Vulnerabilities, Including Unpatched Citrix NetScaler Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has set urgent remediation deadlines for federal agencies to address several critical vulnerabilities, including two unpatched Citrix NetScaler zero-days under active exploitation. Other flaws added to the Known Exploited Vulnerabilities (KEV) catalog with September 28 deadlines include issues in WSO2, Adobe Commerce, Microsoft SharePoint, MikroTik RouterOS, and WordPress.