CISA Adds One Known Exploited Vulnerability to Catalog

2026-09-14T21:24:03Z•3d9440f566a0490e1002a898eb960c423920997fdc112a902dd06c344878cb22
CVE-2025-25249CVE-2026-19490CVE-2026-20079CVE-2026-42016CVE-2026-42018CVE-2026-67277CVE-2026-75650CVE-2026-76461CVE-2026-81963CVE-2026-84869CVE-2026-85046CVE-2026-85706CVE-2026-85880CVE-2026-86060CVE-2026-86218CVE-2026-87491CISA KEVChromiumMicrosoft WindowsSQL injectionactive exploitationauthentication bypassbuffer overflowknown exploited vulnerabilitynetwork appliancespath traversalprivilege escalationurgent patchingvulnerability managementweb applications

What happened

CISA reported additions to its Known Exploited Vulnerabilities (KEV) Catalog from September 8–14, 2026, covering 15 vulnerabilities affecting Cisco, GitLab, JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS, Fortinet, Citrix NetScaler, Google Chromium, Adobe Commerce/Magento, Microsoft Windows, N-able N-central, and Cisco Firewall Management Center. CISA states these vulnerabilities are under active exploitation and urges rapid remediation, especially for publicly exposed federal systems, with compromise assessment where appropriate.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cisa_ncas_current_activity
Record identifier
3d9440f566a0490e1002a898eb960c423920997fdc112a902dd06c344878cb22
Enrichment time
2026-09-14T21:24:03Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.