The August 26 update spans application components, operating systems, network appliances and databases. Businesses should check their own inventory and assign responsibility before choosing a response.
CISA added six vulnerabilities to its known-exploited catalog on August 26, 2026. The entries cover Ajax.NET Professional, Red Hat libuser and the Automatic Bug Reporting Tool, the Linux kernel, Citrix NetScaler ADC and NetScaler Gateway, and Microsoft SQL Server.
Catalog inclusion establishes that CISA lists these flaws as known to be exploited. It does not establish their discovery dates, the first attacks, or a compromise at any particular business. For organizations using the named products, the immediate decision is whether their own systems are affected.
Layer8 recommends reconciling the update with actual software records. Assign an owner to confirm the installed product, build and relevant vendor guidance, including components supplied inside another application. Record affected, unaffected, already remediated or unverified status. An unanswered applicability question should have a person responsible for resolving it.
Layer8 Managed IT maintains asset records, device baselines, patch and change workflows, and exception records within an agreed scope. For this update, we would connect confirmed matches to approved maintenance work, assign responsibility and agree a verification step. Server and network coverage depends on the service agreement.
The acceptance check should go beyond a completed ticket: confirm the resulting installed state and test the business function after the change, with rollback available if needed. If work remains deferred, document the reason, owner and review date. This could reduce exposure from unresolved maintenance; it would not establish that earlier compromise was absent.