CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on August 27 based on confirmed evidence of active exploitation: CVE-2023-49105, an improper authentication flaw in ownCloud that allows attackers to bypass login checks under certain configurations; CVE-2026-53362, an unspecified Linux kernel vulnerability; and CVE-2026-66384, a path traversal issue in JFrog Artifactory that lets an attacker escape a restricted directory. Under Binding Operational Directive 22-01, federal civilian executive branch agencies are required to remediate catalog entries within CISA-set deadlines, and the catalog is widely used well beyond government as a practical prioritization signal for any security team deciding what to patch first. The ownCloud entry is a useful reminder that KEV additions are not always brand-new disclosures; a flaw from 2023 reappearing here means attackers are still actively scanning for and exploiting unpatched self-hosted ownCloud instances more than two years after the original fix shipped, which is a common pattern with widely deployed file-sharing software that admins forget to update. The Artifactory finding is particularly relevant to software supply chain security, since Artifactory instances often sit at the center of build and release pipelines and host proprietary packages, container images, and build artifacts; a path traversal bug there could let an attacker read or overwrite files outside the intended repository storage area. Teams running any of these three products should prioritize patching or verifying mitigations immediately rather than waiting for a routine maintenance window.