> TritonInfoSec News
Home / Sep 11, 2026 / Story
0
#6 The Hacker News general September 10, 2026 at 10:36 UTC

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

By [email protected] (The Hacker News)

AI Summary

CISA added three actively exploited vulnerabilities to its KEV catalog on September 10, 2026, covering Cisco (CVE-2026-20079, CVSS 10.0 authentication bypass), Citrix (NetScaler), and Fortinet (CVE-2025-25249, unauthenticated RCE patched January 2026), with a mandatory federal patch deadline of September 12, 2026. The Fortinet flaw is being used to deploy the PivotC2 RAT, while the Cisco and Citrix flaws are under active exploitation by ransomware and state-sponsored actors. The two-day remediation window for federal agencies underscores the severity of the threat across all three vendors.

Read full article → https://thehackernews.com/2026/09/cisa-flags-explo…

Relevance score: 83.0/100

# More from September 11

  1. 1
    Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers BleepingComputer
  2. 2
    PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances The Hacker News
  3. 3
    New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws BleepingComputer
  4. 4
    New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender SecurityWeek
  5. 5
    Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE The Hacker News
  6. 7
    AI lets small actors run state-level hacking campaigns, Anthropic report finds CyberScoop
  7. 8
    IDScan confirms breach tied to 153 million stolen driver’s licenses BleepingComputer
  8. 9
    Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 The Hacker News
  9. 10
    US says Chinese firms extracted billions of tokens from frontier AI models BleepingComputer