Cybersecurity update: Citrix, Fortinet, and Cisco

These are official cybersecurity alerts from the past week that may affect small and medium businesses. Each item is summarised from the source and links back to it. If you run the products named below, apply the vendor’s updates.

Citrix

Canadian Centre for Cyber Security, 5 October 2026.

Serial Number: AV26-996Date: October 5, 2026 As of October 4, 2026, Citrix is affected by a vulnerability in the following products: NetScaler ADC Prior to 13.1-37.282 Prior to 13.1-64.28 Prior to 14.1-73.41 Prior to 14.1-73.41 FIPS NetScaler Gateway Prior to 13.1-64.28 Prior to 14.1-73.41 Citrix indicates that CVE-2026-88779 is exploited in the wild. On October 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-88779 to their Known Exploited Vulnerabilities (KEV) Catalog. The Cyber Centre encourages users and administrators to…

If these products are in use, apply the vendor updates and read the advisory: official source.

Fortinet

Canadian Centre for Cyber Security, 2 October 2026.

Serial number: AV26-989Date: October 1, 2026 As of October 1, 2026, Fortinet is affected by vulnerabilities in the following products: FortiMail 8.0 Versions prior to 8.0.2 FortiMail 7.6 Versions prior to 7.6.7 FortiMail 7.4 Versions prior to 7.4.9 FortiMail 7.2 Upgrade to branch 7.4 or above Fortinet indicates that CVE-2026-104286 is exploited in the wild. On October 1, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104286 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and…

If these products are in use, apply the vendor updates and read the advisory: official source.

Cisco

Canadian Centre for Cyber Security, 1 October 2026.

Serial Number: AV26-978Date: October 1, 2026 As of September 30, 2026, Cisco is affected by a vulnerability in the following product: Cisco Catalyst SD-WAN Manager Versions prior to 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1 and 26.2.1 On September 30, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76504 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Cisco Catalyst SD-WAN Manager…

If these products are in use, apply the vendor updates and read the advisory: official source.

How Techloom can help

Techloom can review devices, email filtering and Microsoft 365 settings as a security assessment or through managed IT support. We do not guarantee that any control prevents every attack.