CISA added six actively exploited flaws to KEV, including a Citrix NetScaler bug now under attack in the wild.