As cited
Copy frozen at (site build).
vulnerabilities
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
The Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The affected products include JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, with CVE-2026-42016 (CVSS 8.1) involving an authorization flaw.
Why it matters: Organizations using Artifactory, ScreenConnect, or RouterOS face immediate risk from attackers actively exploiting these flaws and should prioritize patching or mitigation for these products.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA has added five vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog on September 12, 2026, based on confirmed active exploitation. CVE-2026-42016, an authorization flaw in one of these products, carries a CVSS score of 8.1.
Why it matters: Security teams using Artifactory, ScreenConnect, or RouterOS should prioritize patching these flaws immediately, as they are already being exploited in attacks and listed on CISA's KEV catalog.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on September 12, 2026, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. CVE-2026-42016, which carries a CVSS score of 8.1, is an incorrect authorization flaw among the newly listed vulnerabilities.
Why it matters: Organizations running Artifactory, ScreenConnect, or RouterOS should prioritize patching these flaws immediately, as active exploitation in the wild confirms imminent threat to production systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including flaws in JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. CVE-2026-42016, affecting Artifactory with a CVSS score of 8.1, involves an incorrect authorization issue.
Why it matters: Security teams must prioritize patching these five vulnerabilities immediately, as they are under active exploitation and tracked by CISA as a prioritization resource for vulnerability remediation.
- Source published
- First seen by Cybersecurity Tracker