CYBER DELTA FORCESearch

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

CDF News DeskThe Hacker News12 Sept 2026, 9:24 pm
Image courtesy of The Hacker News. Original report
CDF REPORT

Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

What to watch next

Watch for additional exploitation reporting, newly published indicators, and changes to vendor guidance.

What remains unknown

The available reporting does not establish which organizations or systems have been directly affected.

The available reporting does not establish who is behind the activity, if an attacker is involved.

MORE IN CLOUD & IDENTITY

More cybersecurity reporting

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev ServersThe Hacker News · 15 Sept 2026, 4:42 pmChina-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGEThe Hacker News · 15 Sept 2026, 11:01 amTwitch extension with 30K installs exposes users’ OAuth tokensBleepingComputer · 15 Sept 2026, 12:33 amUnmasking Cloud Identities: From Behavioral Clustering to Automated DetectionPalo Alto Unit 42 · 14 Sept 2026, 3:30 pm