CISA Adds Two Known Exploited Vulnerabilities to Catalog

September 27, 2026 · 12:00 pm 11 sources

Image: CISA

Coverage

Wires & papers of record

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  CISA · September 27, 2026 12:00
  CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a…
• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
  CISA · September 27, 2026 12:00
  CISA is amplifying Citrix’s disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products: CVE-2026-88771 , CVE-2026-88772 , CVE-2026-88773 , CVE-2026-88774 , CVE-2026-88775 , CVE-2026-88776 , CVE-2026-88777 , and CVE-2026-88778 . CISA has added…
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA · September 29, 2026 12:00
  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses…

Coverage

• Citrix Patches Critical Zero Days Under Active Exploitation
  Infosecurity Magazine · September 28, 2026 08:30
  Citrix has confirmed exploitation of two critical zero-day RCE bugs
• Apple patches CoreGraphics zero-day flaw exploited in attacks
  BleepingComputer · September 29, 2026 07:33
  Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
• Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
  Dark Reading · September 29, 2026 14:19
  The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
• NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
  Help Net Security · September 29, 2026 14:59
  The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept…
• Hackers exploit Citrix NetScaler zero-day to deploy web shells
  BleepingComputer · September 29, 2026 18:37
  Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks. [...]
• Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
  Dark Reading · September 29, 2026 21:31
  Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.

More coverage

• CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
  The Hacker News · September 28, 2026 07:21
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below - CVE-2026-88771 (CVSS score:…
• Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
  The Hacker News · September 28, 2026 19:18
  Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead…