CISA Adds Three Known Exploited Vulnerabilities to Catalog

What happened

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability These types of...

Why it matters

The incident may affect operational continuity, asset safety or trust around Security. Watch for verified scope and remediation.

Affected entities

View evidence

2 reports · 1 original report · 1 independent

1. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 100%
   CISA Adds Three Known Exploited Vulnerabilities to Catalog ↗Sep 11, 2026, 8:00 AM
2. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 57%
   CISA Adds One Known Exploited Vulnerability to Catalog ↗Sep 11, 2026, 8:00 AM

Claims

• CISA Adds Three Known Exploited Vulnerabilities to Catalog Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. September 11, 2026 at 8:00 AMFirst reported

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation