CISA adds ownCloud, Linux IPv6 and Artifactory to KEV

CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on August 27, one in ownCloud, one in the Linux kernel, and one in JFrog Artifactory, per the agency's alert and the catalog itself. CISA names no threat actor and records ransomware use as unknown for all three. The batch is separate from this week's earlier NetScaler and SQL Server additions.

The two urgent entries share a federal remediation deadline of August 30, and CISA flags both for forensic triage.

CVE-2023-49105, an improper-authentication flaw in ownCloud Server, lets an unauthenticated attacker read, change or delete a user's files when the victim's username is known and no signing key is configured. The 2023 identifier is resurfacing on the exploited list rather than arriving as a fresh disclosure. ownCloud fixed it in Server 10.13.3, and the company's Infinite Scale product and its managed services are not affected.

CVE-2026-53362 is a local privilege-escalation bug in the Linux kernel's IPv6 networking path. An attacker already on the machine uses it to climb to higher privilege. CISA points to stable-tree kernel backports for the fix, so the exact patched build comes from a distribution's advisory, not from a single kernel commit hash.

CVE-2026-66384 is a path-traversal issue (CWE-22) in JFrog Artifactory: an authenticated user can write a file outside the intended Docker cache directory under specific remote-repository conditions. JFrog rated it Medium in an advisory published August 12 and shipped fixes in 7.146.35 and 7.161.16. JFrog Cloud is already fortified, so the actionable exposure is self-hosted Artifactory, and its KEV deadline is September 10.

CISA's alert carries its standard note that vulnerabilities like these "are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise." There is no named group and no confirmed ransomware link. The ownCloud and kernel rows carry a forensic-triage flag while the Artifactory row does not. Some single-source victim claims are circulating around the ownCloud bug. They are not part of CISA's entry.

Some offers on this page may be paid placements or contain affiliate links.