CISA Adds Three Known Exploited Vulnerabilities to Catalog

Three vulnerabilities affecting JFrog Artifactory and ConnectWise ScreenConnect have been added to CISA's Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation in the wild. These products are widely deployed in enterprise and federal environments, making unpatched instances high-value targets for threat actors. Federal agencies are legally required under BOD 26-04 to remediate KEV-listed vulnerabilities on public-facing assets within mandated timeframes, yet many organizations still lack the processes to act quickly on such advisories. Delayed patching of actively exploited vulnerabilities significantly increases the window of opportunity for attackers to achieve initial access, lateral movement, or data exfiltration. This underscores the critical need for mature, repeatable vulnerability management programs that can respond rapidly to emerging exploitation activity.