CISA Adds One Known Exploited Vulnerability to Catalog
2026-09-16T15:24:04Z•b757caf2873ab4ab889a88cb50f70ae04b1e1eb8a17f47e076e543b76decf66c
CVE-2025-25249CVE-2026-19490CVE-2026-20079CVE-2026-42016CVE-2026-42018CVE-2026-58704CVE-2026-67277CVE-2026-75650CVE-2026-76461CVE-2026-81963CVE-2026-84869CVE-2026-85706CVE-2026-85880CVE-2026-86060CVE-2026-86218CVE-2026-87491Adobe CommerceCISA KEVCiscoCitrix NetScalerConnectWise ScreenConnectFortinetGitLabGoogle ChromiumGoogle PixelJFrog ArtifactoryMagentoMicrosoft WindowsMikroTik RouterOSN-able N-centralSQL injectionactively exploited vulnerabilitiesauthentication bypassbuffer overflowcommand injectionemergency patchingimproper authorizationpath traversalprivilege escalationvulnerability management
What happened
CISA’s September 2026 alerts report the addition of 19 actively exploited vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog. Affected products include Google Pixel, Cisco Secure Email Gateway and Firewall Management Center, GitLab, JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS, Fortinet, Citrix NetScaler, Google Chromium, Adobe Commerce/Magento, Microsoft Windows, and N-able N-central. Organizations should prioritize emergency remediation, assess internet-exposed assets, and investigate potential compromise before patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- b757caf2873ab4ab889a88cb50f70ae04b1e1eb8a17f47e076e543b76decf66c
- Enrichment time
- 2026-09-16T15:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.