# Newly exploited vulnerabilities: week of 7 to 13 September 2026 (week 37)

Source: https://junglewise.ai/threats/exploited/2026-09-07  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:23 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-09-07.json  
License: CC BY 4.0 with a link back

In the week of 7 to 13 September 2026, 14 vulnerabilities were newly recorded as exploited in the wild, 14 of them critical. The technology hit most was JFrog Artifactory (2), followed by Microsoft Windows (2) and MikroTik RouterOS (2).

## Newly exploited this week

- [CVE-2026-85706: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1…](https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits) (critical, exploited in the wild, CVSS 10, exploited since 11 Sep 2026, published 12 Sep 2026)
- [CVE-2026-42018: JFrog Artifactory improper authentication vulnerability](https://junglewise.ai/threats/cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability) (critical, exploited in the wild, exploited since 11 Sep 2026, published 11 Sep 2026)
- [CVE-2026-84869: A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session…](https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and) (critical, exploited in the wild, CVSS 9.9, exploited since 11 Sep 2026, published 8 Sep 2026)
- [CVE-2026-42016: JFrog Artifactory privilege escalation via improper token scope validation](https://junglewise.ai/threats/cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope) (critical, exploited in the wild, CVSS 8.1, exploited since 11 Sep 2026, published 27 Jul 2026)
- [CVE-2026-86060: RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited…](https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege) (critical, exploited in the wild, CVSS 9.8, exploited since 10 Sep 2026, published 5 Sep 2026)
- [CVE-2026-67277: RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An…](https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service) (critical, exploited in the wild, CVSS 8.2, exploited since 10 Sep 2026, published 5 Sep 2026)
- [CVE-2026-87491: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code…](https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine) (critical, exploited in the wild, CVSS 8.8, exploited since 9 Sep 2026, published 9 Sep 2026)
- [CVE-2026-19490: Citrix NetScaler authentication bypass via alternate path](https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Sep 2026, published 9 Sep 2026)
- [CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interface](https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web) (critical, exploited in the wild, CVSS 10, exploited since 9 Sep 2026, published 4 Mar 2026)
- [CVE-2025-25249: Fortinet FortiOS heap overflow in cw_acd daemon](https://junglewise.ai/threats/cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon) (critical, exploited in the wild, CVSS 8.1, exploited since 9 Sep 2026, published 13 Jan 2026)
- [CVE-2026-85880: Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local) (critical, exploited in the wild, CVSS 7.8, exploited since 8 Sep 2026, published 8 Sep 2026)
- [CVE-2026-81963: Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to…](https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in) (critical, exploited in the wild, CVSS 7.8, exploited since 8 Sep 2026, published 8 Sep 2026)
- [CVE-2026-75650: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that…](https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template) (critical, exploited in the wild, CVSS 10, exploited since 8 Sep 2026, published 7 Sep 2026)
- [CVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.](https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, exploited since 8 Sep 2026, published 6 Sep 2026)

## Technologies hit most

1. [JFrog Artifactory](https://junglewise.ai/threats/technologies/artifactory): 2 vulnerabilities
2. [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-): 2 vulnerabilities
3. [MikroTik RouterOS](https://junglewise.ai/threats/technologies/routeros): 2 vulnerabilities
4. [Adobe Commerce](https://junglewise.ai/threats/technologies/commerce): 1 vulnerability
5. [Adobe Magento](https://junglewise.ai/threats/technologies/magento): 1 vulnerability
6. [Adobe Magento Enterprise Edition](https://junglewise.ai/threats/technologies/magento-enterprise-edition): 1 vulnerability
7. [Adobe Magento Open Source](https://junglewise.ai/threats/technologies/magento-open-source): 1 vulnerability
8. [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 1 vulnerability
9. [Cisco Secure Firewall Management Center (FMC)](https://junglewise.ai/threats/technologies/secure-firewall-management-center-fmc): 1 vulnerability
10. Cisco Security Cloud Control: 1 vulnerability
11. Cisco Security Cloud Control (Scc) Firewall Management: 1 vulnerability
12. Cisco Security Cloud Control Firewall Management: 1 vulnerability
13. [Citrix NetScaler](https://junglewise.ai/threats/technologies/netscaler): 1 vulnerability
14. [Citrix NetScaler ADC](https://junglewise.ai/threats/technologies/netscaler-adc): 1 vulnerability
15. [Citrix NetScaler Gateway](https://junglewise.ai/threats/technologies/gateway): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 7 to 13 September 2026 (week 37)", https://junglewise.ai/threats/exploited/2026-09-07, 2 October 2026.