CISA 2026-08-26

CISA KEV — Red Hat Libuser (CVE-2015-3246) +5 more

Machine-generated analysis · WAYSCloud LLM

CISA added six actively exploited CVEs to its KEV Catalog, including a Citrix NetScaler ADC buffer vulnerability.

Context

The advisory lists vulnerabilities affecting Red Hat libuser, Red Hat Automatic Bug Reporting Tool, Microsoft SQL Server, Ajax.NET Professional, the Linux kernel, and Citrix NetScaler ADC/Gateway. CISA states these vulnerabilities are being actively exploited and federal agencies must prioritize rapid remediation on publicly exposed assets that grant total control. The advisory references BOD 26-04, which requires agencies to check for compromise before patching when possible. CISA encourages all organizations to adopt similar risk-based remediation.

Operator considerations

Check: inventory installations of the listed products and versions.
Patch: apply vendor patches or mitigations for each CVE without delay.
Isolate: restrict network access to vulnerable services on publicly exposed assets if patches cannot be applied immediately.
Log: monitor for exploitation attempts related to the six CVEs.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability

CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability

CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability

CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerabi...

Read the full advisory on CISA →