CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA's latest KEV additions — spanning JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS — flag active exploitation of tools deeply embedded in European CI/CD and remote-support environments.
Summary written by editorial AI · Source link below
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.
Details of the vulnerabilities are as follows -
CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization
Editorial Analysis
These products sit in CI/CD pipelines, remote-support tooling, and network edges — exploitation directly threatens software integrity and lateral movement paths.
Cross-reference your asset inventory against affected products and prioritise patching or isolation within 48 hours.
Five actively exploited vulnerabilities in widely deployed enterprise tools require immediate remediation to prevent supply-chain and network compromise.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d