10Brich House
Menu
Client portal

BSJ Ventures · Goods coverage · The archive by week

Week of 7 September 2026.

What the sources published from 7 September 2026 to 13 September 2026 that touches goods in motion: list actions, advisories and notices, as the source published them, dated and linked.

Read by BSJ Ventures. The record kept by Brich House.

Days
7 September 2026 to 13 September 2026
Entries
37
Sources
7
Read
23 October 2026, 24 October 2026

Week of 7 September 2026

By day, then by source.

Each line is one action as the source published it, with the date the source gives and the date it was read. Some or all of this week was read after the fact, on 23 October 2026, from the sources' own dated records; the read date on each line says which. A listing is a reason to look, never a verdict.

7 entries, 3 sources

CISA KEV · 4

  • Added · Vulnerability

    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

    CISA added CVE-2026-84869, ConnectWise ScreenConnect, to the Known Exploited Vulnerabilities catalog on 11 September 2026.

    The sourceCVE-2026-84869 · ConnectWiseRead

  • Added · Vulnerability

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    CISA added CVE-2026-85706, GitLab Community Edition and Enterprise Edition, to the Known Exploited Vulnerabilities catalog on 11 September 2026.

    The sourceCVE-2026-85706 · GitLabRead

  • Added · Vulnerability

    JFrog Artifactory Improper Authentication Vulnerability

    CISA added CVE-2026-42018, JFrog Artifactory, to the Known Exploited Vulnerabilities catalog on 11 September 2026.

    The sourceCVE-2026-42018 · JFrogRead

  • Added · Vulnerability

    JFrog Artifactory Incorrect Authorization Vulnerability

    CISA added CVE-2026-42016, JFrog Artifactory, to the Known Exploited Vulnerabilities catalog on 11 September 2026.

    The sourceCVE-2026-42016 · JFrogRead

UK Sanctions List · 1

  • Amended · Entity

    S-MIKRON ELEKTRONIK ELEKTRIK SANAYI TAAHHUT TICARET ANONIM SIRKETI

    The UK Sanctions List shows S-MIKRON ELEKTRONIK ELEKTRIK SANAYI TAAHHUT TICARET ANONIM SIRKETI (Turkey) last updated on 11 September 2026 under the The Russia (Sanctions) (EU Exit) Regulations 2019 regime.

    The sourceTurkeyRead

CBP CSMS and bulletins · 2

  • Advisory · Advisory or notice

    CSMS 69846117, LAST CALL: Final Hours Before the ACE User Satisfaction Survey Closes

    CBP's Cargo Systems Messaging Service published CSMS 69846117 on 11 September 2026: LAST CALL: Final Hours Before the ACE User Satisfaction Survey Closes.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69851916, Modifying Section 338 Additional Duties on Certain Goods of Canada

    CBP's Cargo Systems Messaging Service published CSMS 69851916 on 11 September 2026: Modifying Section 338 Additional Duties on Certain Goods of Canada.

    The sourceRead

8 entries, 5 sources

OFAC · 1

  • Advisory · Rule or notice

    Iran-related and Counter Terrorism Designations; Licensing Policy Update under Operation Economic Outcast; Settlement Agreement between OFAC and an Individual

    OFAC posted "Iran-related and Counter Terrorism Designations; Licensing Policy Update under Operation Economic Outcast; Settlement Agreement between OFAC and an Individual" on 10 September 2026 (Sanctions List Updates).

    The sourceRead

CISA KEV · 2

  • Added · Vulnerability

    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

    CISA added CVE-2026-86060, MikroTik RouterOS, to the Known Exploited Vulnerabilities catalog on 10 September 2026.

    The sourceCVE-2026-86060 · MikroTikRead

  • Added · Vulnerability

    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

    CISA added CVE-2026-67277, MikroTik RouterOS, to the Known Exploited Vulnerabilities catalog on 10 September 2026.

    The sourceCVE-2026-67277 · MikroTikRead

CISA ICS advisories · 2

  • Advisory · Device make

    AVEVA Pipeline Integrity Monitor

    CISA published ICS advisory ICSA-26-253-01, AVEVA Pipeline Integrity Monitor, on 10 September 2026.

    The sourceRead

  • Advisory · Device make

    ST Engineering iDirect iQ-Series Terminals (Update A)

    CISA published ICS advisory ICSA-26-183-01, ST Engineering iDirect iQ-Series Terminals (Update A), on 10 September 2026.

    The sourceRead

UK Sanctions List · 2

  • Amended · Entity

    an individual entry; see the source

    The UK Sanctions List shows one individual entry last updated on 10 September 2026; see the source.

    The sourceRead

  • Amended · Entity

    JSC SOLID BANK

    The UK Sanctions List shows JSC SOLID BANK (Russia) last updated on 10 September 2026 under the The Russia (Sanctions) (EU Exit) Regulations 2019 regime.

    The sourceRussiaRead

CBP CSMS and bulletins · 1

  • Advisory · Advisory or notice

    CSMS 69827440, Document Image System (DIS) Validation of Internal Transaction Number (ITN) for Electronic Export Information (EEI) Submissions (CBP-255) Deployed to ACE in the Certification Environment and Updated DIS Implementation Guide is Now Available

    CBP's Cargo Systems Messaging Service published CSMS 69827440 on 10 September 2026: Document Image System (DIS) Validation of Internal Transaction Number (ITN) for Electronic Export Information (EEI) Submissions (CBP-255) Deployed to ACE in the Certification Environment and Updated DIS Implementation Guide is Now Available.

    The sourceRead

12 entries, 5 sources

OFAC · 1

  • Advisory · Rule or notice

    Transnational Criminal Organizations Designations; Counter Terrorism Designation; Issuance of New and Amended Frequently Asked Questions

    OFAC posted "Transnational Criminal Organizations Designations; Counter Terrorism Designation; Issuance of New and Amended Frequently Asked Questions" on 9 September 2026 (Sanctions List Updates).

    The sourceRead

FCC Covered List · 3

  • Advisory · Device make

    ASUS Computer International's RT Router Series, ROG GT Series, ROG Strix GS Series, TUF Gaming Series, ExpertWiFi Series, ZenWiFi Mesh Series, 5G MiFi Series, repeaters, and wireless access points

    The FCC's Covered List page (confirmed against fcc.gov on 23 October 2026) posts a conditional approval dated 9 September 2026 (router): ASUS Computer International's RT Router Series, ROG GT Series, ROG Strix GS Series, TUF Gaming Series, ExpertWiFi Series, ZenWiFi Mesh Series, 5G MiFi Series, repeaters, and wireless access points.

    The sourceRead

  • Advisory · Device make

    Comtrend Corporation's GRG-4366u, VG-8043u, PBL-6201, and NL-3131 wireless routers

    The FCC's Covered List page (confirmed against fcc.gov on 23 October 2026) posts a conditional approval dated 9 September 2026 (router): Comtrend Corporation's GRG-4366u, VG-8043u, PBL-6201, and NL-3131 wireless routers.

    The sourceRead

  • Advisory · Device make

    Husqvarna AB 305v IQ, 310v IQ, 420v IQ, and 440v IQ robotic platforms

    The FCC's Covered List page (confirmed against fcc.gov on 23 October 2026) posts a conditional approval dated 9 September 2026: Husqvarna AB 305v IQ, 310v IQ, 420v IQ, and 440v IQ robotic platforms.

    The sourceRead

CISA KEV · 4

  • Added · Vulnerability

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CISA added CVE-2026-20079, Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management, to the Known Exploited Vulnerabilities catalog on 9 September 2026.

    The sourceCVE-2026-20079 · CiscoRead

  • Added · Vulnerability

    Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CISA added CVE-2026-19490, Citrix NetScaler, to the Known Exploited Vulnerabilities catalog on 9 September 2026.

    The sourceCVE-2026-19490 · CitrixRead

  • Added · Vulnerability

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

    CISA added CVE-2025-25249, Fortinet Multiple Products, to the Known Exploited Vulnerabilities catalog on 9 September 2026.

    The sourceCVE-2025-25249 · FortinetRead

  • Added · Vulnerability

    Google Chromium V8 Out of Bounds Write Vulnerability

    CISA added CVE-2026-87491, Google Chromium V8, to the Known Exploited Vulnerabilities catalog on 9 September 2026.

    The sourceCVE-2026-87491 · GoogleRead

UK Sanctions List · 1

  • Amended · Entity

    XINBI COMPANY LIMITED

    The UK Sanctions List shows XINBI COMPANY LIMITED last updated on 9 September 2026 under the The Global Human Rights Sanctions Regulations 2020 regime.

    The sourceRead

CBP CSMS and bulletins · 3

  • Advisory · Advisory or notice

    CSMS 69813688, Update to Ocean CAMIR Export Manifest, Input to Customs and Border Protection Implementation Guide (IG)

    CBP's Cargo Systems Messaging Service published CSMS 69813688 on 9 September 2026: Update to Ocean CAMIR Export Manifest, Input to Customs and Border Protection Implementation Guide (IG).

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69813698, ACE Production Standard Invasive Maintenance from 10:00 p.m. ET Saturday, September 12, 2026, to 4:00 a.m. ET Sunday, Sep 13, 2026

    CBP's Cargo Systems Messaging Service published CSMS 69813698 on 9 September 2026: ACE Production Standard Invasive Maintenance from 10:00 p.m. ET Saturday, September 12, 2026, to 4:00 a.m. ET Sunday, Sep 13, 2026.

    The sourceRead

  • Advisory · Advisory or notice

    Customs Bulletin Weekly Vol 60, September 9, 2026, No. 27

    CBP published Customs Bulletin Weekly Vol 60, September 9, 2026, No. 27 on 9 September 2026.

    The sourceRead

9 entries, 5 sources

OFAC · 1

  • Advisory · Rule or notice

    Iran-related Designations; Counter Terrorism Designations; Updates to Iran-related General Licenses; Issuance of Counter Terrorism General License

    OFAC posted "Iran-related Designations; Counter Terrorism Designations; Updates to Iran-related General Licenses; Issuance of Counter Terrorism General License" on 8 September 2026 (Sanctions List Updates).

    The sourceRead

CISA KEV · 4

  • Added · Vulnerability

    Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

    CISA added CVE-2026-75650, Adobe Commerce and Magento, to the Known Exploited Vulnerabilities catalog on 8 September 2026.

    The sourceCVE-2026-75650 · AdobeRead

  • Added · Vulnerability

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    CISA added CVE-2026-85880, Microsoft Windows, to the Known Exploited Vulnerabilities catalog on 8 September 2026.

    The sourceCVE-2026-85880 · MicrosoftRead

  • Added · Vulnerability

    Microsoft Windows Link Following Vulnerability

    CISA added CVE-2026-81963, Microsoft Windows, to the Known Exploited Vulnerabilities catalog on 8 September 2026.

    The sourceCVE-2026-81963 · MicrosoftRead

  • Added · Vulnerability

    N-able N-central Static Code Injection Vulnerability

    CISA added CVE-2026-86218, N-able N-central, to the Known Exploited Vulnerabilities catalog on 8 September 2026.

    The sourceCVE-2026-86218 · N-ableRead

CISA ICS advisories · 1

  • Advisory · Device make

    CareCam Pro IP Cameras

    CISA published ICS advisory ICSA-26-251-01, CareCam Pro IP Cameras, on 8 September 2026.

    The sourceRead

UK Sanctions List · 2

  • Added · Entity

    AL-QARD AL-HASAN

    The UK Sanctions List shows AL-QARD AL-HASAN (Lebanon) designated on 8 September 2026 under the The Counter-Terrorism (International Sanctions) (EU Exit) Regulations 2019 regime.

    The sourceLebanonRead

  • Added · Entity

    an individual entry; see the source

    The UK Sanctions List shows five individual entries designated on 8 September 2026; see the source.

    The sourceRead

CBP CSMS and bulletins · 1

  • Advisory · Advisory or notice

    CSMS 69749802, REMINDER: Only a Few Days Left to Share Your Feedback on ACE

    CBP's Cargo Systems Messaging Service published CSMS 69749802 on 8 September 2026: REMINDER: Only a Few Days Left to Share Your Feedback on ACE.

    The sourceRead

1 entry, 1 source

Suez Canal circulars · 1

  • Advisory · Rule or notice

    Suez Canal Authority Periodical No. 28/2026

    The Suez Canal Authority published Periodical No. (28/2026) on 7 September 2026: Periodical No. 1 of 2026 remains in effect with all its provisions for an additional six months, from August 1, 2026, until January 31, 2027.

    The sourceRead

The files

The whole record, as data.

This week’s entries are rows in the whole record, one row per action, with the identifiers in their own columns.

Read on over 24 August 2026 to 12 October 2026, from each source’s own dated public record: OFAC (24 added), BIS Entity List (2 added), 1260H list (0 added), FCC Covered List (7 added), CISA KEV (65 added), CISA ICS advisories (83 added), Section 889 and FASCSA (1 added), EU consolidated list (0 added), UK Sanctions List (64 added), CBP CSMS and bulletins (84 added), Tariff and HTS actions (7 added), FEMA declarations (26 added), New Jersey declarations (2 added), New York declarations (2 added). Every entry from this read carries its source’s date and the read date 23 October 2026.

  • Port of New York and New Jersey: the port's pages render by script and its sitemap lists no advisories page; advisories go out by email subscription; nothing read by script
  • Coast Guard MSIB: homeport.uscg.mil resets a scripted connection, so neither the bulletins nor the terms can be read by script; nothing read
  • Maersk advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • MSC advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • CMA CGM notices: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • Hapag-Lloyd advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • ONE advisories: ONE's Term of Use bars spidering, crawling and scraping (section 4, read 23 October 2026)
  • Evergreen notices: the notices page renders its list by script from a form endpoint; the page itself carries no titles; nothing read
  • COSCO notices: the site renders by script, the terms page included; the terms could not be read by script
  • AIS archive baseline: no archive file extracted yet; each daily file is about 300 to 400 MB and the download is run by hand on the desk (scripts/goods/ais-baseline-extract.ts)
  • Weather Service warnings: api.weather.gov serves the alerts in force and keeps no archive of past ones, so a window that ends before the read date is not read

Download

Each file carries the licence line: public data read by BSJ Ventures from public sources with no keys and no company API; reuse in your own work with the line 'BSJ Ventures, goods coverage, <date>'; no resale of the dataset as such; it states what a source published and when, not what any rule requires of you. The same data answers by API with a key: the data and API page.

Describes what the sources published, as read; not a verdict on any entity; not a forecast; not legal advice.

A listing is a reason to look, never a verdict. An individual on a list is counted, never named.