# Citrix NetScaler receives at least one further CISA KEV entry (any CVE) with dateAdded after 2026-10-13 and on or before 2027-01-11.

- **Artifact ID:** SO-2026-009
- **Status:** OPEN
- **Public record:** https://record.cybersecurityhq.com/forecasts/so-2026-009
- **Machine-record SHA-256:** `0cb02a883ee4ce30b9342ab74f3d3da993240d089ae448e00f051037cc4e7901`

## Complete structured record

```json
{
  "id": "SO-2026-009",
  "class": "EVENT",
  "claim": "Citrix NetScaler receives at least one further CISA KEV entry (any CVE) with dateAdded after 2026-10-13 and on or before 2027-01-11.",
  "issued": "2026-10-13T12:30:00Z",
  "probability": 0.8,
  "benchmark": 0.9,
  "benchmark_kind": "HISTORICAL_COMPARATOR",
  "benchmark_basis": "Registry base: six NetScaler catalog rows in 7.5 months (about 0.8 per month); Poisson at 2.4 per 90 days gives 0.91; shaded down because the last three entries cluster in nine days and may have exhausted a research seam.",
  "adjustment": -0.1,
  "resolution_rule": "YES if the KEV JSON contains a NetScaler entry with dateAdded in the window.",
  "admissibility": "Only publications dated after 2026-10-13T12:30Z count; for EVENT-class, only events occurring after that timestamp count. Evidence pre-dating issuance resolves the forecast RETROSPECTIVE_DISCOVERY, not YES.",
  "exclusions": null,
  "resolves": "2027-01-11",
  "status": "OPEN",
  "outcome_date": null,
  "outcome_basis": null,
  "brier": null,
  "benchmark_brier": null,
  "resolution_source": "EXTERNAL",
  "experimental": true,
  "false_positive_cost": "Under-forecast would understate a vendor base rate the record already shows.",
  "ledger_hash": "9c2bcfe834e02bed",
  "revision_log": [],
  "record_links": []
}
```