CISA Flags Three Actively Exploited Vulnerabilities in JFrog Artifactory and ConnectWise ScreenConnect, Urges Immediate Remediation
Security Alert & Advisory: The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active, in-the-wild exploitation of three high-severity security vulnerabilities impacting enterprise DevOps pipelines and remote management tools. Unpatched installations of JFrog Artifactory and ConnectWise ScreenConnect are currently being targeted by threat actors seeking administrative compromise and software supply chain access.
On September 11, 2026, CISA officially released a critical security bulletin formally adding three actively weaponized vulnerabilities to its authoritative Known Exploited Vulnerabilities (KEV) Catalog. The flaws allow unauthenticated or low-privilege network adversaries to execute unauthorized actions, forge authentication sessions, and escalate privileges to seize full control over host environments.
Because both products occupy privileged perimeters within modern enterprise technology stacks—JFrog Artifactory as the central repository for software packages and container images, and ConnectWise ScreenConnect as the foundational platform for remote device access and administrative support—the blast radius of successful exploitation is exceptionally high.
Under federal mandates, Federal Civilian Executive Branch (FCEB) agencies are required to prioritize remediation and conduct retroactive compromise assessments. All private organizations and global enterprise infrastructure teams are strongly urged to treat these patches as emergency operational priorities.
#Technical Overview & Vulnerability Matrix
The three additions to the KEV Catalog reflect a dangerous combination of identity and authorization weaknesses. Threat actors frequently exploit authorization and authentication bypasses because they do not require complex binary memory manipulation; once bypassed, the application natively grants access to sensitive assets.
The following matrix provides a technical comparison of the three actively targeted vulnerabilities:
| Vulnerability Identifier | Affected Software | Vulnerability Type |
|---|
