CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency has added five vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog. Their inclusion confirms that the flaws are already being exploited in real-world attacks, making it urgent to apply the available fixes. The issues cited include CVE-2026-42016, an authorization vulnerability with a CVSS score of 8.1. The affected products are frequently exposed or used as central components of IT infrastructure, so a compromise could provide attackers with privileged access, persistence, or opportunities for lateral movement. Organizations should immediately identify affected instances, apply vendor updates, and look for indicators of prior exploitation rather than limiting their response to simply installing patches.

Source: The Hacker News