Multiple Zero-Day Vulnerabilities Under Active Exploitation Require Immediate Patching

Several critical zero-day vulnerabilities are under active exploitation, prompting urgent remediation efforts. These include flaws in Citrix NetScaler ADC and Gateway (CVE-2026-88771, CVE-2026-88772), Fortinet FortiMail (CVE-2026-104286), and an actively exploited bug in Apple's Core Graphics framework (CVE-2026-86950). CISA has set a remediation due date of October 4, 2026, for the Fortinet and Citrix vulnerabilities, emphasizing the immediate threat and the need for organizations to apply patches or workarounds to prevent compromise.