![\"\"](\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhva55LDIsAmtR2cRnUJw2XZ3Rvo4YhdJe39cfng8EZ1oHjLevxwRcYoFdg-ydI2I7fdt9OxGj7aMcaHMekZmy9hwSlopIZ4_KQgRnmiSy0OfGh8zO26StiEeOsHaQ4fYed0dbEUCUcz4gJM9Lu6Wt7m-ppDmI7iMl52-cRfQfsu9d90Sp2ncuvbVpAPupe\/s1600\/jj.jpg\")
<\/a><\/div>\nThe U.S. Cybersecurity and Infrastructure Safety Company (CISA) has added 5 safety flaws impacting JFrog Artifactory, ConnectWise ScreenConnect<\/a>, and MikroTik RouterOS<\/a> to its Recognized Exploited Vulnerabilities (KEV<\/a>) catalog, following studies of lively exploitation within the wild.<\/p>\n Particulars of the vulnerabilities are as follows –<\/p>\n As beforehand reported<\/a> by The Hacker Information, attackers have been noticed chaining the 2 Artifactory bugs alongside CVE-2026-82329<\/a> (CVSS rating: 9.8) to take administrator management of self-hosted servers and deploy backdoors between August 15 and September 8, 2026. CVE-2026-82329 was added<\/a> to CISA’s KEV catalog earlier this month.<\/p>\n <\/p>\n “Attackers are chaining these vulnerabilities to bypass authentication, escalate privileges, and acquire administrative management over susceptible Artifactory cases,” Google-owned Wiz mentioned. “Noticed post-exploitation exercise consists of the creation of persistent administrator accounts, the deployment of malicious Groovy plugins for code execution, and the set up of Rust-based backdoors to determine persistence.”<\/p>\n The exploitation of CVE-2026-84869, however, has been linked to a set of three unrelated incidents documented<\/a> by Huntress through which risk actors abused ScreenConnect to distribute a malicious Visible Primary Script (VBScript) payload to newly related methods.<\/p>\n ConnectWise has described<\/a> the flaw as a “situation” within the ScreenConnect shopper that “could enable information to be transferred and executed by means of an lively distant session with out authorization or Host affirmation in sure circumstances.” The difficulty doesn’t impression ScreenConnect servers.<\/p>\n “Underneath sure circumstances, this might allow information to be transferred to and executed on the Host shopper system, together with by means of elevated execution actions,” Huntress mentioned<\/a> in an replace, urging organizations to replace to ScreenConnect model 26.6.5.<\/p>\n CISA’s addition of CVE-2026-67277 and CVE-2026-86060 follows a report<\/a> from CERT Polska final week through which it mentioned it noticed<\/a> unknown risk actors exploiting two flaws in MikroTik RouterOS to grab management of susceptible gadgets with out authentication. The cybersecurity company dubbed the exploit chain MikroTrick.<\/p>\n Federal Civilian Government Department (FCEB) businesses are required to patch the RouterOS flaws by September 13, 2026, the ScreenConnect flaw by September 14, 2026, and the Artifactory flaws by September 25, 2026.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":" \ue804Ravie Lakshmanan\ue802Sep 12, 2026Vulnerability \/ Enterprise Safety The U.S. Cybersecurity and Infrastructure Safety Company (CISA) has added 5 safety flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Recognized Exploited Vulnerabilities (KEV) catalog, following studies of lively exploitation within the wild. Particulars of the vulnerabilities are as follows – CVE-2026-42016 (CVSS rating: 8.1) […]<\/p>\n","protected":false},"author":2,"featured_media":18662,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[1993,390,10523,1359,1994,1812,4988,10524,894],"class_list":["post-18660","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-actively","tag-adds","tag-artifactory","tag-cisa","tag-exploited","tag-flaws","tag-kev","tag-routeros","tag-screenconnect"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18660","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18660"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18660\/revisions"}],"predecessor-version":[{"id":18661,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18660\/revisions\/18661"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/18662"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n