CISA adds five actively exploited Artifactory, ScreenConnect, and RouterOS flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency today added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, The Hacker News reports. The KEV designation signals confirmed exploitation and compels U.S. civilian agencies to prioritize remediation on an accelerated timeline. The move highlights ongoing targeting of widely deployed developer tools, remote support software, and router platforms.

According to The Hacker News, one listed issue is CVE-2026-42016, rated CVSS 8.1 and described as an incorrect authorization flaw, with exploitation observed in the wild, and CISA is urging organizations beyond government to apply vendor patches or mitigations and hunt for signs of compromise across exposed Artifactory, ScreenConnect, and RouterOS instances. Watch for CISA’s binding operational directive deadlines, vendor advisories from JFrog, ConnectWise, and MikroTik, and any added indicators of compromise or new CVE details as they emerge. [Developing. This article will be updated.]