CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added 15 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between September 10 and 16, 2026, citing evidence of active exploitation. Affected products include Cisco Identity Services Engine and Secure Email Gateway, Acronis Backup, Google Pixel and Chromium, GitLab, JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS, Fortinet products, Citrix NetScaler, and Cisco Firewall Management Center. Organizations should prioritize remediation, exposure assessment, and compromise checking, consistent with CISA risk-based vulnerability guidance and BOD 26-04.