CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday expanded its Known Exploited Vulnerabilities (KEV) catalog with six new entries, signaling confirmed active exploitation. Among the additions is CVE-2019-1068, a high-severity remote code execution vulnerability in Citrix NetScaler ADC and NetScaler Gateway. The agency did not provide additional technical details in the initial advisory but emphasized the need for immediate remediation.

The KEV catalog is a critical resource for federal agencies and private sector organizations, as it lists vulnerabilities that are known to be exploited in the wild. CISA's addition of these six flaws underscores the ongoing threat landscape and the importance of timely patching.

While the specific details of the other five vulnerabilities were not fully disclosed in the available information, the inclusion of Linux and SQL Server bugs highlights the broad scope of active threats. Organizations using affected products should prioritize patching and monitor CISA's advisories for further guidance.

CISA's action aligns with its Binding Operational Directive (BOD) 22-01, which requires federal civilian executive branch agencies to remediate KEV-listed vulnerabilities by specified deadlines. Private sector entities are strongly encouraged to follow suit to reduce their exposure to known exploits.