CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Attackers are actively chaining known vulnerabilities across JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to escalate privileges, install backdoors, and distribute malware — all using flaws that have publicly available patches. CISA's addition of these CVEs to the KEV catalog signals that exploitation is widespread and not merely theoretical. The core failure is the gap between vulnerability disclosure and organizational patching, leaving attackers a wide window to exploit known weaknesses. Federal agencies face mandated remediation deadlines, but private sector organizations without such mandates are equally at risk if they lack a structured patch prioritization process.