🟠High: CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with six newly confirmed flaws, citing verified evidence of active exploitation in the wild. Among the additions is a high-severity vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway, which has been flagged as an active attack vector.
The newly added entries include a remote code execution flaw tracked as CVE-2019-1068, which impacts Microsoft Windows systems. This vulnerability is part of a broader batch that spans multiple vendors and platforms, including Linux-based products and Microsoft SQL Server.
- Citrix NetScaler ADC and NetScaler Gateway — high-severity flaw with confirmed exploitation.
- Microsoft SQL Server — vulnerability included in the KEV update.
- Linux kernel — security bug added due to observed malicious activity.
- Four additional vulnerabilities were also listed, though specific identifiers for all entries were not fully detailed in the advisory.
CISA's KEV catalog serves as a critical resource for federal agencies and private organizations, mandating remediation within established deadlines under Binding Operational Directive (BOD) 22-01. While the exact patch timelines vary by severity, all listed flaws require immediate attention to mitigate risk.
Organizations using affected products are strongly urged to review their exposure, apply vendor-provided updates, and monitor for indicators of compromise tied to these exploits.
Source: The Hacker News
Does your organization track the KEV catalog closely, and how are you prioritizing the NetScaler and SQL Server patches given the active exploitation evidence?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login