// day
Sep 11, 2026
3 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Sep 11, 2026
ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
› ConnectWise ScreenConnect
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation. Added to CISA KEV on 2026-09-11.
CVE-2026-84869 - highclosedpatchedclosed Sep 11, 2026
GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
› GitLab Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Added to CISA KEV on 2026-09-11.
CVE-2026-85706 - highclosedpatchedclosed Sep 11, 2026
JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability
› JFrog Artifactory
JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. CISA added CVE-2026-42016, CVE-2026-42018 to the Known Exploited Vulnerabilities catalog on 2026-09-11 based on evidence of active exploitation.
CVE-2026-42016CVE-2026-42018
