CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA's latest KEV additions — spanning JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS — flag active exploitation of tools deeply embedded in European CI/CD and remote-support environments.
Summary written by editorial AI · Source link below
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.
Details of the vulnerabilities are as follows -
CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization
Editorial Analysis
These products sit in CI/CD pipelines, remote-support tooling, and network edges — exploitation directly threatens software integrity and lateral movement paths.
Cross-reference your asset inventory against affected products and prioritise patching or isolation within 48 hours.
Five actively exploited vulnerabilities in widely deployed enterprise tools require immediate remediation to prevent supply-chain and network compromise.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Vulnerabilities Desk
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks3d
- QNAP says hackers breaching NAS devices in Plex2Shell attacks3d
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time3d
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen3d
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen3d