Weekly client KEV Advisory

(Known Exploited Vulnerabilities)

A ready-to-send note for your clients, built from this week's CISA Known Exploited Vulnerabilities additions. Copy it, add your branding, and send.

Week of 12 September 2026 · Last updated: 12 September 2026 14:19 UTC

Copy-ready advisory

Tone:

Security advisory, week of 12 September 2026

We are checking your environment for exposure and will confirm remediation.

The vulnerabilities below were added to CISA's Known Exploited Vulnerabilities catalog in the last seven days. They are being actively exploited. If you run any of these products, they should be patched now, ahead of the normal cycle.

- ConnectWise ScreenConnect (CVE-2026-84869)
- JFrog Artifactory (CVE-2026-42016)
- JFrog Artifactory (CVE-2026-42018)
- GitLab Community Edition and Enterprise Edition (CVE-2026-85706)
- MikroTik RouterOS (CVE-2026-86060)
- MikroTik RouterOS (CVE-2026-67277)
- Citrix NetScaler (CVE-2026-19490)
- Fortinet Multiple Products (CVE-2025-25249)
- Google Chromium V8 (CVE-2026-87491)
- Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management (CVE-2026-20079)
- Adobe Commerce and Magento (CVE-2026-75650)
- Microsoft Windows (CVE-2026-81963)
- N-able N-central (CVE-2026-86218)
- Microsoft Windows (CVE-2026-85880)

Reply to this message with any questions.