CISA 2026-09-11

CISA KEV — JFrog Artifactory (CVE-2026-42016) +2 more

Machine-generated analysis · WAYSCloud LLM

CISA added two JFrog Artifactory and one ConnectWise ScreenConnect CVEs to the KEV Catalog. The advisory notes they are actively exploited.

Context

The advisory lists CVE-2026-42016 and CVE-2026-42018 affecting JFrog Artifactory, and CVE-2026-84869 affecting ConnectWise ScreenConnect. CISA states these vulnerabilities are being actively exploited and are now in the Known Exploited Vulnerabilities (KEV) Catalog. BOD 26-04 directs agencies to prioritize rapid remediation on publicly exposed instances that grant total control after exploitation.

Operator considerations

Check: Identify all JFrog Artifactory and ConnectWise ScreenConnect installations and record their versions.
Isolate: Segment or restrict network access to any publicly exposed instances that provide full control.
Patch: Apply vendor-released patches or updates for the listed CVEs as soon as they are available.
Log: Monitor authentication failures and privilege-escalation events on these services.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability

CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability

CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those i...

Read the full advisory on CISA →