CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reported additions to its Known Exploited Vulnerabilities (KEV) Catalog from September 11–18, 2026, citing evidence of active exploitation. The affected technologies include Linux Kernel, Cisco Identity Services Engine and Secure Email Gateway, Acronis Backup, Google Pixel, GitLab, JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. Organizations should prioritize remediation, assess internet-facing assets, and investigate potential compromise before patching, consistent with risk-based vulnerability management and BOD 26-04 guidance.