CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

As cited

Copy frozen at 2026-09-10 12:42 UTC (site build).

vulnerabilities

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

CISA added three flaws affecting Cisco, Citrix, and Fortinet to its Known Exploited Vulnerabilities (KEV) catalog on September 10, 2026, with active exploitation confirmed. Federal agencies must patch these vulnerabilities by September 12, 2026. CVE-2026-20079, affecting one of these vendors, carries a critical CVSS score of 10.0.

Why it matters: Federal agencies must prioritize patching by the September 12 deadline; all organizations should treat these actively exploited flaws as immediate priorities regardless of KEV status.

Source published

2026-09-10 10:36 UTC

First seen by Cybersecurity Tracker

2026-09-10 12:20 UTC