Fortinet says attackers are exploiting a CVSS 9.8 unauthenticated file-write flaw in FortiMail, and no fixed release has shipped yet. Until builds arrive, its two workarounds are the only protection, including for 7.2 users told to move to a 7.4 branch that is still unpatched.
Perspective Coverage
10 publishers
- Builder
- Builder 10%
- Operator
- Operator 82%
- Investor
- Investor 8%
Reality
- Evidence78
- Adoption30
- Hype gap+8
- Incentives40
- Confidence76
buildConfirmed3 publishers Citrix confirmed attackers are exploiting two CVSS 9.5 pre-auth RCE flaws in NetScaler ADC and Gateway, one of them present in default configurations. Self-managed appliances need the fixed build, installed after evidence is saved, since an upgrade can erase signs of intrusion.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 65%
- Investor
- Investor 13%
Reality
- Evidence76
- Adoption68
- Hype gap+5
- Incentives35
- Confidence74
buildOne report1 publisher Citrix and Cisco edge flaws push remote-access gateways to the front of the DACH OT patch queue
Two exploited Citrix NetScaler zero-days and a CVSS 9.8 Cisco SD-WAN Manager flaw top a weekly DACH OT risk bulletin. For many operators, both products enforce segmentation into OT, so an attacker who takes one over is standing in front of the control systems.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives35
- Confidence45
CISA now flags CVE-2025-14733 as used in ransomware attacks, nine months after WatchGuard shipped the fix. Shadowserver's scans show the exposed population fell from more than 115,000 to nearly 9,000, and that remainder is the target set.
Reality
- Evidence70
- Adoption85
- Hype gap+5
- Incentives30
- Confidence72
Config audit decides whether the new NetScaler patches are an emergency
Citrix shipped fixes on 19 August 2026 for a memory overflow and an authentication bypass in NetScaler ADC and Gateway, but each one needs particular features turned on, so the inventory has to come before the change window.
Reality
- Evidence48
- Adoption
- Not scored
- Hype gap+12
- Incentives35
- Confidence55