CISA adds five actively exploited Artifactory, ScreenConnect and RouterOS flaws to KEV list

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, signalling that these weaknesses are being leveraged by threat actors in the wild. The vulnerabilities span three widely used products – JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS – and are now flagged for immediate attention by organisations worldwide, including those operating in Australia.

One of the listed flaws, CVE-2026-42016, carries a CVSS v3.1 base score of 8.1 and is described as an incorrect authorization issue that could allow unauthorised users to gain elevated privileges or bypass security controls. While the full details of the remaining four CVEs have not been disclosed in this brief, CISA’s inclusion of the defects underscores the urgency for rapid patching and mitigation across affected environments.

Australian businesses, particularly those in the public sector and critical infrastructure, are advised to review their exposure to these products and apply vendor‑released patches without delay. The Australian Cyber Security Centre (ACSC) routinely aligns its guidance with CISA’s KEV listings, reinforcing the need for local organisations to treat these vulnerabilities as high‑risk items in their security roadmaps.

For IT professionals and students seeking to deepen their understanding of vulnerability management and secure network design, now is an opportune time to engage with specialised training. Wepro Technology, based in Darwin, offers courses such as CompTIA Security+ and Cisco’s CCNA that cover best practices for protecting networked systems against exploits like those highlighted by CISA.