NetScaler

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog Including Cisco FMC and Fortinet FortiOS

The US Cybersecurity and Infrastructure Security Agency has added four vulnerabilities to its Known Exploited Vulnerabilities catalog, warning that they are being actively exploited in the wild. The flaws affect Cisco Secure Firewall Management Center, Security Cloud Control, Fortinet FortiOS, FortiSwitchManager, and Citrix NetScaler products. One vulnerability allows attackers to bypass authentication and gain root privileges through crafted HTTP requests. Another is a heap-based buffer overflow that enables execution of unauthorized code or commands via specially crafted packets. CISA issued the update on September 9, 2026, urging organizations to apply patches immediately. The agency continues to track these issues as part of its ongoing efforts to mitigate real-world threats.

Weekly Roundup: Next.js Leads Critical Vulnerability Reports as Chrome, Tomcat, and PostgreSQL See Major Patches

Security NEXT has published its list of the ten most-read articles for the week of August 23-29, 2026. The top story covered multiple serious vulnerabilities in Next.js that prompted an accelerated release schedule. Other high-interest items included a critical flaw in Zscaler Client Connector, several issues in Apache Tomcat rated critical, and Google’s Chrome 152 update fixing 327 vulnerabilities. Additional reports highlighted a ransomware incident at a systems development firm, flaws in SKYSEA Client View, 28 vulnerabilities fixed in PostgreSQL, and confirmed exploitation of six known flaws in SQL Server and NetScaler. The list also featured a vulnerability in the Android version of the Digital Agency’s My Number Point app and warnings about active exploitation of a WebLogic module flaw.