CISA Adds One Known Exploited Vulnerability to Catalog
2026-09-14T21:24:03Z•3d9440f566a0490e1002a898eb960c423920997fdc112a902dd06c344878cb22
CVE-2025-25249CVE-2026-19490CVE-2026-20079CVE-2026-42016CVE-2026-42018CVE-2026-67277CVE-2026-75650CVE-2026-76461CVE-2026-81963CVE-2026-84869CVE-2026-85046CVE-2026-85706CVE-2026-85880CVE-2026-86060CVE-2026-86218CVE-2026-87491CISA KEVChromiumMicrosoft WindowsSQL injectionactive exploitationauthentication bypassbuffer overflowknown exploited vulnerabilitynetwork appliancespath traversalprivilege escalationurgent patchingvulnerability managementweb applications
What happened
CISA reported additions to its Known Exploited Vulnerabilities (KEV) Catalog from September 8–14, 2026, covering 15 vulnerabilities affecting Cisco, GitLab, JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS, Fortinet, Citrix NetScaler, Google Chromium, Adobe Commerce/Magento, Microsoft Windows, N-able N-central, and Cisco Firewall Management Center. CISA states these vulnerabilities are under active exploitation and urges rapid remediation, especially for publicly exposed federal systems, with compromise assessment where appropriate.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 3d9440f566a0490e1002a898eb960c423920997fdc112a902dd06c344878cb22
- Enrichment time
- 2026-09-14T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.