CISA adds JFrog Artifactory CVE-2026-42016 and CVE-2026-42018 and ConnectWise ScreenConnect CVE-2026-84869 to KEV
CISA added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Two affect JFrog Artifactory: CVE-2026-42016 (incorrect authorization) and CVE-2026-42018 (improper authentication). The third is CVE-2026-84869 in ConnectWise ScreenConnect (improper privilege management and mis…