Ground.News CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog
Article Content
- •CISA added five new vulnerabilities to the KEV catalog on September 11, 2026.
- •Critical flaws include CVE-2026-42016 affecting JFrog Artifactory with a CVSS score of 8.1.
- •Seven previously added vulnerabilities include critical issues in Kestra and SonicWall appliances.
On September 11, 2026, CISA added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. These vulnerabilities include CVE-2026-42016, which has a CVSS score of 8.1. This update follows the addition of seven other flaws on September 2, including critical vulnerabilities in SonicWall and Kestra, with CVE-2026-49869 being linked to a cryptocurrency mining attack. The vulnerabilities span various systems, indicating a broad attack surface across enterprise environments. The urgency for patching is heightened as these flaws are confirmed to be exploited in the wild. Organizations are advised to prioritize remediation efforts to mitigate risks associated with these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Qilin, JFrog and CVE-2026-42016 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Ransomware Attack Exposes Burnaby School District Data on Dark Web The Burnaby School District in British Columbia experienced a ransomware attack on September 21, 2026, allegedly perpetrated by the Russian hacker group Qilin. The group claims to have posted sensitive data, including personal information of students and staff, on the dark web. The school district confirmed that the… 
SAP Exploits Surge: Days to Zero Report Highlights Critical Vulnerabilities A report from Onapsis Research Labs and Recorded Future reveals that the median time from the release of a SAP Security Note to the first public exploit has drastically decreased to 1-3 days, down from 489 days in 2021. The report analyzed over 1.2 million events and noted a 123% increase in underground discussions…