<![CDATA[🔴 Critical: CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline]]>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three actively exploited flaws to its Known Exploited Vulnerabilities (KEV) catalog, each affecting a different vendor: Cisco, Citrix, and Fortinet. Federal Civilian Executive Branch (FCEB) agencies are required to apply the corresponding patches by September 12, 2026.

The vulnerabilities flagged are:

  • CVE-2026-20079 (CVSS score: 10.0) — an authentication issue in a Cisco product.

The article notes that this Cisco flaw carries the maximum severity rating, underscoring the urgency of remediation for exposed systems. CISA's KEV designation means the vulnerability is confirmed to be exploited in the wild, not merely theoretical, which is why the binding patch deadline applies to federal agencies.

Details on the Citrix and Fortinet vulnerabilities, including their specific identifiers, were not provided in the source material. Organizations running any of the three vendors' affected products should track vendor advisories directly and prioritize patching ahead of the federal deadline.

Source: The Hacker News

Does your organization run any Cisco, Citrix, or Fortinet products that could be affected by these KEV additions?

]]>https://xploitlk.com/topic/285/critical-cisa-flags-exploited-cisco-citrix-fortinet-flaws-sets-sept.-12-federal-patch-deadlineRSS for NodeSat, 12 Sep 2026 05:50:09 GMTThu, 10 Sep 2026 12:30:19 GMT60