CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The US Cybersecurity and Infrastructure Security Agency has added five security vulnerabilities to its Known Exploited Vulnerabilities catalog. These vulnerabilities affect JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, and are being actively exploited. One of the vulnerabilities, identified as CVE-2026-42016, has a CVSS score of 8.1 and is related to incorrect authorization. The addition to the catalog indicates that these flaws are being targeted by attackers in real-world scenarios. The vulnerabilities are now tracked by CISA due to reported active exploitation.