<![CDATA[🟠 High: CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs]]>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with six newly confirmed flaws, citing verified evidence of active exploitation in the wild. Among the additions is a high-severity vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway, which has been flagged as an active attack vector.

The newly added entries include a remote code execution flaw tracked as CVE-2019-1068, which impacts Microsoft Windows systems. This vulnerability is part of a broader batch that spans multiple vendors and platforms, including Linux-based products and Microsoft SQL Server.

  • Citrix NetScaler ADC and NetScaler Gateway — high-severity flaw with confirmed exploitation.
  • Microsoft SQL Server — vulnerability included in the KEV update.
  • Linux kernel — security bug added due to observed malicious activity.
  • Four additional vulnerabilities were also listed, though specific identifiers for all entries were not fully detailed in the advisory.

CISA's KEV catalog serves as a critical resource for federal agencies and private organizations, mandating remediation within established deadlines under Binding Operational Directive (BOD) 22-01. While the exact patch timelines vary by severity, all listed flaws require immediate attention to mitigate risk.

Organizations using affected products are strongly urged to review their exposure, apply vendor-provided updates, and monitor for indicators of compromise tied to these exploits.

Source: The Hacker News

Does your organization track the KEV catalog closely, and how are you prioritizing the NetScaler and SQL Server patches given the active exploitation evidence?

]]>https://xploitlk.com/topic/160/high-cisa-adds-six-exploited-flaws-to-kev-including-netscaler-linux-and-sql-server-bugsRSS for NodeSat, 05 Sep 2026 13:29:17 GMTMon, 31 Aug 2026 00:30:29 GMT60