CISA adds six actively exploited flaws to KEV catalog

CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws affecting Citrix NetScaler ADC and Gateway, Microsoft SQL Server, the Linux kernel, Red Hat software and Ajax.NET Professional. The agency cited active exploitation for the high-severity NetScaler flaw CVE-2026-8452. The source reports web shells and discovery commands in attacks targeting that issue, while CISA set August 29 remediation deadlines for the SQL Server and NetScaler flaws and September 9 deadlines for the other four. The source says no public information explains exploitation of CVE-2019-1068.