CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities are as follows - CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization

Report fact: CISA added five actively exploited vulnerabilities in JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, signaling that these components are being used in real-world attacks. RealGround analysis: While the article does not mention AI directly, these products can be part of the infrastructure and software supply chain underlying AI systems and agents, so unpatched flaws may allow attackers to compromise platforms that host AI models or agent runtimes. Organizations should inventory whether their AI pipelines, inference services, or MLOps stacks depend on these affected components and incorporate them into SBOM-driven vulnerability management. Hardening and patching this underlying infrastructure is essential to prevent supply-chain style compromises of AI systems.