Changes in September 2026

In CISA made 14 changes to its list that its own file does not keep.

  1. CVE-2026-63077 JetBrains TeamCityRansomware use: Unknown to Known.
  2. CVE-2026-86060 MikroTik RouterOSEdited: description.
  3. CVE-2026-86060 MikroTik RouterOSEdited: notes.
  4. CVE-2026-84869 ConnectWise ScreenConnectEdited: description.
  5. CVE-2026-67277 MikroTik RouterOSEdited: description.
  6. CVE-2026-42016 JFrog ArtifactoryEdited: description.
  7. CVE-2026-59310 Broadcom VMware vCenterRansomware use: Unknown to Known.
  8. CVE-2026-20316 Cisco Secure Firewall Management Center (FMC)Ransomware use: Unknown to Known.
  9. CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS)Ransomware use: Unknown to Known.
  10. CVE-2019-0859 Microsoft Win32kRansomware use: Unknown to Known.
  11. CVE-2016-7255 Microsoft Win32kRansomware use: Unknown to Known.
  12. CVE-2025-14733 WatchGuard FireboxRansomware use: Unknown to Known.
  13. CVE-2022-37969 Microsoft WindowsRansomware use: Unknown to Known.
  14. CVE-2016-4117 Adobe Flash PlayerRansomware use: Unknown to Known.