Name: Prioritized vulnerability dataset – Week 5 of March 2026
Creator: defend.network
Published: 2026-03-30T07:00:00Z
License: https://creativecommons.org/licenses/by/4.0/

Analyst Guidance

This week reflects sustained critical threats across OT/ICS and enterprise systems with multiple actively exploited vulnerabilities. F5 BIG-IP APM (CVE-2025-53521) and Citrix NetScaler (CVE-2026-3055) are under active exploitation and require immediate patching. Defense.network customers should prioritize these two vulnerabilities and the remote code execution flaws in PTC Windchill and WAGO industrial switches as the most urgent threats.

CVE Details & Remediation

How to read this report

Verified facts — NVD & CISA KEV Partially verified — awaiting NVD enrichment AI analysis — synthesis, verify before acting

Actionable · Verified facts

NVD-published · CISA KEV cross-checked

🛡️CVE-2025-53521 – F5 BIG-IP Access Policy Manager (APM) pending NVD

CVSSawaiting NVD

Triage statusActive Exploit

ExploitationNo exploitation reported

ActionPatch immediately

AffectedFinance Government Healthcare Technology

Remediation Steps

Verify current BIG-IP APM version against F5 security advisory
Apply critical patch from F5 as released to CISA KEV catalog
Implement network segmentation to restrict APM access if patching delayed
Monitor access logs for exploitation attempts (POST requests with unusual parameters)
Test patch in staging environment before production deployment

References:

🛡️CVE-2026-3055 – Citrix NetScaler ADC and NetScaler Gateway pending NVD

CVSSawaiting NVD

Triage statusActive Exploit

ExploitationNo exploitation reported

ActionPatch immediately

AffectedFinance Government Healthcare Technology Education

Remediation Steps

Identify all Citrix NetScaler ADC and Gateway deployments in your infrastructure
Apply Citrix security patches addressing memory overread vulnerability
Restrict access to NetScaler management interfaces via IP whitelisting
Enable input validation and WAF rules on gateway endpoints
Monitor for suspicious memory access patterns and connection spikes

References:

🤖 This vulnerability report was compiled by defend.network using AI-powered analysis of vulnerability databases, vendor advisories, and threat intelligence feeds. Always verify remediation steps through official vendor channels before implementing changes in production environments.

Vulnerability Priority Report – Week 5 of March 2026

Analyst Guidance

CVE Details & Remediation

🛡️CVE-2025-53521 – F5 BIG-IP Access Policy Manager (APM) pending NVD

Remediation Steps

🛡️CVE-2026-3055 – Citrix NetScaler ADC and NetScaler Gateway pending NVD

Remediation Steps

Get Vulnerability Priority Updates