Skip to content
CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog

CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog

First seen 13 Sep 2026, 09:11 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 13, 2026 at 09:58 UTC
  • •CISA added five new vulnerabilities to the KEV catalog on September 11, 2026.
  • •Critical flaws include CVE-2026-42016 affecting JFrog Artifactory with a CVSS score of 8.1.
  • •Seven previously added vulnerabilities include critical issues in Kestra and SonicWall appliances.

On September 11, 2026, CISA added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. These vulnerabilities include CVE-2026-42016, which has a CVSS score of 8.1. This update follows the addition of seven other flaws on September 2, including critical vulnerabilities in SonicWall and Kestra, with CVE-2026-49869 being linked to a cryptocurrency mining attack. The vulnerabilities span various systems, indicating a broad attack surface across enterprise environments. The urgency for patching is heightened as these flaws are confirmed to be exploited in the wild. Organizations are advised to prioritize remediation efforts to mitigate risks associated with these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-01
Public exploit for CVE-2026-48710 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2026-06-26
CVE-2026-49869 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-08
CVE-2026-59822 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-01
CVE-2026-83548 published
A server-side request forgery vulnerability in SonicWall SMA 1000 was disclosed.
Cybersecurity-Insiders
2026-09-01
CVE-2026-83549 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-02
CVE-2026-83548 added to CISA KEV
CISA included CVE-2026-83548 in its KEV catalog due to active exploitation.
Cybersecurity-Insiders
2026-09-10
CISA KEV update reported
CISA's recent updates highlight vulnerabilities in AI tools and networking equipment.
Cybersecurity-Insiders
2026-09-11
CVE-2026-42016 added to CISA KEV
CISA added five vulnerabilities affecting JFrog Artifactory, ScreenConnect, and RouterOS to its KEV catalog.
Ground.News

More articles in this cluster (6)

Following this threat?

Track Qilin, JFrog and CVE-2026-42016 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (50)

1 / 4