CISA Adds 5 Actively Exploited Artifactory, Screen Connect, and RouterOS Flaws to KEV

Summary: CISA added five flaws in JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its KEV catalog after reports of active exploitation. Attackers chained the two Artifactory bugs with CVE-2026-82329 to take administrator control of self-hosted servers and deploy backdoors between August 15 and September 8, 2026, while CERT Polska reported unknown actors exploiting the RouterOS flaws without authentication in an exploit chain it called MikroTrick.
Key Takeaway: FCEB agencies must patch the RouterOS flaws by September 13, 2026, the ScreenConnect flaw by September 14, and the Artifactory flaws by September 25 - and the Artifactory chain already produced persistent administrator accounts, malicious Groovy plugins, and Rust-based backdoors.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2026-67277 CVE-2026-82329 CVE-2026-84869 CVE-2026-86060
Related: Share Point RCE and Mikro Tik RouterOS Flaws Actively Exploited in the Wild Cyber Risks ·
SCKit Malware Turns Screen Connect Support Sessions Into Potential MSP Attack Paths Cyber Risks · Nov 12, 2026
CVE-2026-84869: Connect Wise Screen Connect Improper Privilege Management and Missing Authorization Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026