NIST

BreakingCitrix NetScaler flaw CVE-2026-88779 is being actively exploited, CISA warns
CISA added the Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on October 4, 2026, with a federal remediation deadline of October 7, 2026.

BreakingZammad GmbH Zammad flaw CVE-2026-102489 is being actively exploited, CISA warns
CISA added the Zammad GmbH Zammad vulnerability to its Known Exploited Vulnerabilities catalog on October 2, 2026, with a federal remediation deadline of October 5, 2026.

BreakingFortinet FortiMail flaw CVE-2026-104286 is being actively exploited, CISA warns
CISA added the Fortinet FortiMail vulnerability to its Known Exploited Vulnerabilities catalog on October 1, 2026, with a federal remediation deadline of October 4, 2026.

BreakingCisco Catalyst SD-WAN Manager flaw CVE-2026-76504 is being actively exploited, CISA warns
CISA added the Cisco Catalyst SD-WAN Manager vulnerability to its Known Exploited Vulnerabilities catalog on September 30, 2026, with a federal remediation deadline of October 3, 2026.

BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.

BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.

BreakingMicrosoft SharePoint flaw CVE-2026-65660 is being actively exploited, CISA warns
CISA added the Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.

BreakingWordPress Core flaw CVE-2026-87902 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.