Aug 262025 CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git CISA adds Citrix and Git flaws to KEV after active exploitation; agencies must patch by Sept 15, 2025.