ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-8452 — Citrix NetScaler ADC & Gateway (CVSS 8.8): Memory overflow vulnerability added to CISA KEV on August 26. FCEB agencies must patch by August 29, 2026. Actively exploited in the wild. CVE-2026-55040 + CVE-2026-63520 — Microsoft SharePoint RCE Chain: JWT token authentication bypass (CVE-2026-55040) chained with Business Connectivity Services RCE (CVE-2026-63520). Public PoCs released; active exploitation began within 24 hours. C

ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-72529 (TrueConf Server Missing Authentication) & CVE-2026-72530 (TrueConf Server Code Injection): Critical-severity bugs present in all TrueConf Server versions since 2022, actively exploited by hacktivist group Head Mare to deploy PhantomCore malware, install web shells, and harvest infrastructure credentials. Exploited via port 4307/TCP. Fixed in versions 5.3.9, 5.4.9, and 5.5.5. Added to CISA KEV August 20, 2026. FCEB patch deadl

ACTIVELY EXPLOITED VULNERABILITIES CISA added CVE-2026-48939 (iCagenda Unrestricted Upload of File with Dangerous Type) and CVE-2026-56291 (Balboola Forms Unrestricted Upload of File with Dangerous Type) to the Known Exploited Vulnerabilities catalog; FCEB agencies must remediate by the stated deadline. CVE-2026-50522 — Critical Microsoft SharePoint RCE is under active exploitation after a public PoC was released. Organizations running on-premises SharePoint should patch imme