Cybersecurity update: Critical vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway –, Veeam security advisory (AV26-513) – Update 1, and CISA Adds Two Known Exploited Vulnerabilities to Catalog

These are official cybersecurity alerts from the past week that may affect small and medium businesses. Each item is summarised from the source and links back to it. If you run the products named below, apply the vendor’s updates.

Critical vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway –

Canadian Centre for Cyber Security, 27 September 2026.

Number: AL26-024Date: September 27, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The Canadian Centre for Cyber Security (Cyber Centre) is…

If these products are in use, apply the vendor updates and read the advisory: official source.

Veeam security advisory (AV26-513) – Update 1

Canadian Centre for Cyber Security, 21 September 2026.

Serial number: AV26-513Date: May 27, 2026Updated: September 21, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products: Veeam Backup & Replication – 13 versions prior to 13.0.2.29 Veeam ONE – versions prior to 13.0.2.6723 Veeam Service Provider Console – 9.2 versions prior to 9.2.1.33875 Update 1 Open-source reporting indicates that CVE-2026-32996 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply the…

If these products are in use, apply the vendor updates and read the advisory: official source.

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA, 25 September 2026.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces…

If these products are in use, apply the vendor updates and read the advisory: official source.

How Techloom can help

Techloom can review devices, email filtering and Microsoft 365 settings as a security assessment or through managed IT support. We do not guarantee that any control prevents every attack.