10Brich House
Menu
Client portal

BSJ Ventures · Goods coverage · The archive by week

Week of 21 September 2026.

What the sources published from 21 September 2026 to 27 September 2026 that touches goods in motion: list actions, advisories and notices, as the source published them, dated and linked.

Read by BSJ Ventures. The record kept by Brich House.

Days
21 September 2026 to 27 September 2026
Entries
54
Sources
7
Read
23 October 2026

Week of 21 September 2026

By day, then by source.

Each line is one action as the source published it, with the date the source gives and the date it was read. Some or all of this week was read after the fact, on 23 October 2026, from the sources' own dated records; the read date on each line says which. A listing is a reason to look, never a verdict.

2 entries, 1 source

CISA KEV · 2

  • Added · Vulnerability

    Citrix NetScaler Improper Input Validation Vulnerability

    CISA added CVE-2026-88771, Citrix NetScaler, to the Known Exploited Vulnerabilities catalog on 27 September 2026.

    The sourceCVE-2026-88771 · CitrixRead

  • Added · Vulnerability

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    CISA added CVE-2026-88772, Citrix NetScaler, to the Known Exploited Vulnerabilities catalog on 27 September 2026.

    The sourceCVE-2026-88772 · CitrixRead

12 entries, 4 sources

CISA KEV · 3

  • Added · Vulnerability

    Microsoft SharePoint Code Injection Vulnerability

    CISA added CVE-2026-65660, Microsoft SharePoint, to the Known Exploited Vulnerabilities catalog on 25 September 2026.

    The sourceCVE-2026-65660 · MicrosoftRead

  • Added · Vulnerability

    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

    CISA added CVE-2026-67279, MikroTik RouterOS, to the Known Exploited Vulnerabilities catalog on 25 September 2026.

    The sourceCVE-2026-67279 · MikroTikRead

  • Added · Vulnerability

    WordPress Core Remote File Inclusion Vulnerability

    CISA added CVE-2026-87902, WordPress Core, to the Known Exploited Vulnerabilities catalog on 25 September 2026.

    The sourceCVE-2026-87902 · WordPressRead

CBP CSMS and bulletins · 7

  • Advisory · Advisory or notice

    CSMS 70013692, Change in Submission Method for Organization Broker License Applications, September 30, 2026

    CBP's Cargo Systems Messaging Service published CSMS 70013692 on 25 September 2026: Change in Submission Method for Organization Broker License Applications, September 30, 2026.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70023767, Information: Quota Bulletin 26-510 2026 United Kingdom Automobile Quarter 4 Tariff Rate Quota

    CBP's Cargo Systems Messaging Service published CSMS 70023767 on 25 September 2026: Information: Quota Bulletin 26-510 2026 United Kingdom Automobile Quarter 4 Tariff Rate Quota.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70023787, Information: Quota Bulletin 26-226 2026 Argentina Beef Tranche 4

    CBP's Cargo Systems Messaging Service published CSMS 70023787 on 25 September 2026: Information: Quota Bulletin 26-226 2026 Argentina Beef Tranche 4.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70023947, Guidance: Quota Bulletin 26-221 2027 Condiments and Mixed Seasonings

    CBP's Cargo Systems Messaging Service published CSMS 70023947 on 25 September 2026: Guidance: Quota Bulletin 26-221 2027 Condiments and Mixed Seasonings.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70023967, Information: Quota Bulletin 26-215 2027 Cocoa Powder

    CBP's Cargo Systems Messaging Service published CSMS 70023967 on 25 September 2026: Information: Quota Bulletin 26-215 2027 Cocoa Powder.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70023995, Information: Quota Bulletin 26-134 2027 Haiti Economic Lift Program Act (HELP)

    CBP's Cargo Systems Messaging Service published CSMS 70023995 on 25 September 2026: Information: Quota Bulletin 26-134 2027 Haiti Economic Lift Program Act (HELP).

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70024711, Guidance: Quota Bulletin 26-222 2027 Mixes & Doughs

    CBP's Cargo Systems Messaging Service published CSMS 70024711 on 25 September 2026: Guidance: Quota Bulletin 26-222 2027 Mixes & Doughs.

    The sourceRead

New Jersey declarations · 1

  • Advisory · Declaration

    Executive Order 25: Declares that certain counties within the State of New Jersey will enter a State of Emergency, effective at 5 p.m. on Friday, September 25, 2026

    The State of New Jersey issued Executive Order 25 on 25 September 2026: Declares that certain counties within the State of New Jersey will enter a State of Emergency, effective at 5 p.m. on Friday, September 25, 2026.

    The sourceRead

New York declarations · 1

  • Advisory · Declaration

    Executive Order 63: Declaring a Disaster Emergency in the Counties of Bronx, Kings, Nassau, New York, Queens, Richmond, Suffolk, Westchester, and Contiguous Counties

    The State of New York issued Executive Order 63: Declaring a Disaster Emergency in the Counties of Bronx, Kings, Nassau, New York, Queens, Richmond, Suffolk, Westchester, and Contiguous Counties on 25 September 2026.

    The sourceRead

10 entries, 4 sources

OFAC · 1

  • Advisory · Rule or notice

    Publication of Regulatory Amendments; Publication of Report for Licensing Activities Undertaken Pursuant to the Trade Sanctions Reform and Export Enhancement Act (TSRA)

    OFAC posted "Publication of Regulatory Amendments; Publication of Report for Licensing Activities Undertaken Pursuant to the Trade Sanctions Reform and Export Enhancement Act (TSRA)" on 24 September 2026 (Regulations and Guidance).

    The sourceRead

CISA KEV · 2

  • Added · Vulnerability

    Adobe Commerce and Magento Incorrect Authorization Vulnerability

    CISA added CVE-2026-71362, Adobe Commerce and Magento, to the Known Exploited Vulnerabilities catalog on 24 September 2026.

    The sourceCVE-2026-71362 · AdobeRead

  • Added · Vulnerability

    WSO2 Multiple Products Path Traversal Vulnerability

    CISA added CVE-2026-5430, WSO2 Multiple Products, to the Known Exploited Vulnerabilities catalog on 24 September 2026.

    The sourceCVE-2026-5430 · WSO2Read

CISA ICS advisories · 3

  • Advisory · Device make

    Botslab G980H Dashcams

    CISA published ICS advisory ICSA-26-267-01, Botslab G980H Dashcams, on 24 September 2026.

    The sourceRead

  • Advisory · Device make

    Eufy Omni C20, Omni X10 Pro

    CISA published ICS advisory ICSA-26-267-02, Eufy Omni C20, Omni X10 Pro, on 24 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens Mendix Runtime (Update A)

    CISA published ICS advisory ICSA-26-209-02, Siemens Mendix Runtime (Update A), on 24 September 2026.

    The sourceRead

CBP CSMS and bulletins · 4

  • Advisory · Advisory or notice

    CSMS 70011959, ACE Production Standard Invasive Maintenance from 10:00 p.m. ET Saturday, September 26, 2026 to 4:00 a.m. ET Sunday, September 27, 2026

    CBP's Cargo Systems Messaging Service published CSMS 70011959 on 24 September 2026: ACE Production Standard Invasive Maintenance from 10:00 p.m. ET Saturday, September 26, 2026 to 4:00 a.m. ET Sunday, September 27, 2026.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70014324, Information: Quota Bulletin 26-301 2027 Refined Sugar

    CBP's Cargo Systems Messaging Service published CSMS 70014324 on 24 September 2026: Information: Quota Bulletin 26-301 2027 Refined Sugar.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70014436, Information: Quota Bulletin 26-304 2027 Sugar Containing Products

    CBP's Cargo Systems Messaging Service published CSMS 70014436 on 24 September 2026: Information: Quota Bulletin 26-304 2027 Sugar Containing Products.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70015464, Information: Quota Bulletin 26-305 2027 Specialty Sugar

    CBP's Cargo Systems Messaging Service published CSMS 70015464 on 24 September 2026: Information: Quota Bulletin 26-305 2027 Specialty Sugar.

    The sourceRead

8 entries, 3 sources

OFAC · 1

  • Advisory · Rule or notice

    Democratic Republic of the Congo-related Designations Removals

    OFAC posted "Democratic Republic of the Congo-related Designations Removals" on 23 September 2026 (Sanctions List Updates).

    The sourceRead

CBP CSMS and bulletins · 5

  • Advisory · Advisory or notice

    CSMS 69990316, MANDATORY: Complete Broker Continuing Education Requirements by January 31, 2027

    CBP's Cargo Systems Messaging Service published CSMS 69990316 on 23 September 2026: MANDATORY: Complete Broker Continuing Education Requirements by January 31, 2027.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70001277, ACE Certification Standard Invasive Maintenance Window on September 23, 2026 from 5:00 p.m. to 8:00 p.m. ET

    CBP's Cargo Systems Messaging Service published CSMS 70001277 on 23 September 2026: ACE Certification Standard Invasive Maintenance Window on September 23, 2026 from 5:00 p.m. to 8:00 p.m. ET.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70003236, Information: Quota Bulletin 26-231 Further Ensuring Affordable Beef Tranche 2

    CBP's Cargo Systems Messaging Service published CSMS 70003236 on 23 September 2026: Information: Quota Bulletin 26-231 Further Ensuring Affordable Beef Tranche 2.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 70005765, Electronic Export Manifest for Truck Cargo Test

    CBP's Cargo Systems Messaging Service published CSMS 70005765 on 23 September 2026: Electronic Export Manifest for Truck Cargo Test.

    The sourceRead

  • Advisory · Advisory or notice

    Customs Bulletin Weekly Vol 60, September 23, 2026, No. 29

    CBP published Customs Bulletin Weekly Vol 60, September 23, 2026, No. 29 on 23 September 2026.

    The sourceRead

Tariff and HTS actions · 2

  • Advisory · Rule or notice

    Fiscal Year 2027 Tariff-Rate Quota Allocations for Raw Cane Sugar

    Trade Representative, Office of United States published "Fiscal Year 2027 Tariff-Rate Quota Allocations for Raw Cane Sugar" in the Federal Register on 23 September 2026 (notice, document 2026-19399).

    The sourcedocument 2026-19399Read

  • Advisory · Rule or notice

    Guidance and Procedures for Implementing Tariff Adjustments for Specialty Pharmaceuticals and Associated Pharmaceutical Ingredients and Technical Corrections to the Harmonized Tariff Schedule of the United States for Duties Imposed Under Proclamation 11020

    Commerce Department and Industry and Security Bureau published "Guidance and Procedures for Implementing Tariff Adjustments for Specialty Pharmaceuticals and Associated Pharmaceutical Ingredients and Technical Corrections to the Harmonized Tariff Schedule of the United States for Duties Imposed Under Proclamation 11020" in the Federal Register on 23 September 2026 (notice, document 2026-19498).

    The sourcedocument 2026-19498Read

18 entries, 3 sources

CISA KEV · 4

  • Added · Vulnerability

    Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

    CISA added CVE-2026-93952, Arista VeloCloud Orchestrator, to the Known Exploited Vulnerabilities catalog on 22 September 2026.

    The sourceCVE-2026-93952 · AristaRead

  • Added · Vulnerability

    Check Point Multiple Products Improper Certificate Validation Vulnerability

    CISA added CVE-2026-85102, Check Point Multiple Products, to the Known Exploited Vulnerabilities catalog on 22 September 2026.

    The sourceCVE-2026-85102 · Check PointRead

  • Added · Vulnerability

    Check Point Multiple Products Path Traversal Vulnerability

    CISA added CVE-2026-93616, Check Point Multiple Products, to the Known Exploited Vulnerabilities catalog on 22 September 2026.

    The sourceCVE-2026-93616 · Check PointRead

  • Added · Vulnerability

    F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

    CISA added CVE-2026-94127, F5 BIG-IP APM, to the Known Exploited Vulnerabilities catalog on 22 September 2026.

    The sourceCVE-2026-94127 · F5Read

CISA ICS advisories · 9

  • Advisory · Device make

    lwIP (Lightweight IP)

    CISA published ICS advisory ICSA-26-265-02, lwIP (Lightweight IP), on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    lwIP TCP/IP Stack MQTT Client Application

    CISA published ICS advisory ICSA-26-265-01, lwIP TCP/IP Stack MQTT Client Application, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    OpenPLC Runtime v3

    CISA published ICS advisory ICSA-26-265-09, OpenPLC Runtime v3, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens Desigo CC family

    CISA published ICS advisory ICSA-26-265-05, Siemens Desigo CC family, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens Industrial Edge Management

    CISA published ICS advisory ICSA-26-265-06, Siemens Industrial Edge Management, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens SIMOVE Fleetmanager and SIPLANT

    CISA published ICS advisory ICSA-26-265-07, Siemens SIMOVE Fleetmanager and SIPLANT, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens SIPLUS and SIMATIC Products

    CISA published ICS advisory ICSA-26-265-04, Siemens SIPLUS and SIMATIC Products, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens Siveillance Control

    CISA published ICS advisory ICSA-26-265-03, Siemens Siveillance Control, on 22 September 2026.

    The sourceRead

  • Advisory · Device make

    Siemens WTV676 and WTV776

    CISA published ICS advisory ICSA-26-265-08, Siemens WTV676 and WTV776, on 22 September 2026.

    The sourceRead

CBP CSMS and bulletins · 5

  • Advisory · Advisory or notice

    CSMS 69988954, Three PGA-Related CATAIR Documents have been Moved out of the Draft Section and into the PROD Section on CBP.gov

    CBP's Cargo Systems Messaging Service published CSMS 69988954 on 22 September 2026: Three PGA-Related CATAIR Documents have been Moved out of the Draft Section and into the PROD Section on CBP.gov.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69990151, Harmonized System Update (HSU) 2622

    CBP's Cargo Systems Messaging Service published CSMS 69990151 on 22 September 2026: Harmonized System Update (HSU) 2622.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69990649, GUIDANCE: Section 301 China Conforming Amendment

    CBP's Cargo Systems Messaging Service published CSMS 69990649 on 22 September 2026: GUIDANCE: Section 301 China Conforming Amendment.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69990667, ACE Manifest Modernization Release 3-Ocean (INT-062) is in Certification Environment for Testing and Scheduled to Deploy to Production October 24, 2026

    CBP's Cargo Systems Messaging Service published CSMS 69990667 on 22 September 2026: ACE Manifest Modernization Release 3-Ocean (INT-062) is in Certification Environment for Testing and Scheduled to Deploy to Production October 24, 2026.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69994928, GUIDANCE: Import Ban of Certain Polysilicon Products Under Proclamation 11052

    CBP's Cargo Systems Messaging Service published CSMS 69994928 on 22 September 2026: GUIDANCE: Import Ban of Certain Polysilicon Products Under Proclamation 11052.

    The sourceRead

4 entries, 2 sources

CISA KEV · 1

  • Added · Vulnerability

    Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

    CISA added CVE-2026-7273, Zyxel GS1900 Series Switches, to the Known Exploited Vulnerabilities catalog on 21 September 2026.

    The sourceCVE-2026-7273 · ZyxelRead

CBP CSMS and bulletins · 3

  • Advisory · Advisory or notice

    CSMS 69847323, Information on Customs Broker Permit User Fee Changes Effective October 1, 2026

    CBP's Cargo Systems Messaging Service published CSMS 69847323 on 21 September 2026: Information on Customs Broker Permit User Fee Changes Effective October 1, 2026.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69980481, Harmonized System Update (HSU) 2623

    CBP's Cargo Systems Messaging Service published CSMS 69980481 on 21 September 2026: Harmonized System Update (HSU) 2623.

    The sourceRead

  • Advisory · Advisory or notice

    CSMS 69980710, Harmonized System Update (HSU) 2624

    CBP's Cargo Systems Messaging Service published CSMS 69980710 on 21 September 2026: Harmonized System Update (HSU) 2624.

    The sourceRead

The files

The whole record, as data.

This week’s entries are rows in the whole record, one row per action, with the identifiers in their own columns.

Read on over 24 August 2026 to 12 October 2026, from each source’s own dated public record: OFAC (24 added), BIS Entity List (2 added), 1260H list (0 added), FCC Covered List (7 added), CISA KEV (65 added), CISA ICS advisories (83 added), Section 889 and FASCSA (1 added), EU consolidated list (0 added), UK Sanctions List (64 added), CBP CSMS and bulletins (84 added), Tariff and HTS actions (7 added), FEMA declarations (26 added), New Jersey declarations (2 added), New York declarations (2 added). Every entry from this read carries its source’s date and the read date 23 October 2026.

  • Port of New York and New Jersey: the port's pages render by script and its sitemap lists no advisories page; advisories go out by email subscription; nothing read by script
  • Coast Guard MSIB: homeport.uscg.mil resets a scripted connection, so neither the bulletins nor the terms can be read by script; nothing read
  • Maersk advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • MSC advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • CMA CGM notices: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • Hapag-Lloyd advisories: the site answers 403 to a scripted read, the terms page included; the terms could not be read by script
  • ONE advisories: ONE's Term of Use bars spidering, crawling and scraping (section 4, read 23 October 2026)
  • Evergreen notices: the notices page renders its list by script from a form endpoint; the page itself carries no titles; nothing read
  • COSCO notices: the site renders by script, the terms page included; the terms could not be read by script
  • AIS archive baseline: no archive file extracted yet; each daily file is about 300 to 400 MB and the download is run by hand on the desk (scripts/goods/ais-baseline-extract.ts)
  • Weather Service warnings: api.weather.gov serves the alerts in force and keeps no archive of past ones, so a window that ends before the read date is not read

Download

Each file carries the licence line: public data read by BSJ Ventures from public sources with no keys and no company API; reuse in your own work with the line 'BSJ Ventures, goods coverage, <date>'; no resale of the dataset as such; it states what a source published and when, not what any rule requires of you. The same data answers by API with a key: the data and API page.

Describes what the sources published, as read; not a verdict on any entity; not a forecast; not legal advice.

A listing is a reason to look, never a verdict. An individual on a list is counted, never named.