CISA Adds SharePoint and MikroTik RouterOS Flaws to KEV

CISA adds SharePoint and MikroTik RouterOS flaws to KEV

CISA has added CVE-2026-65660 and CVE-2026-67279 to its Known Exploited Vulnerabilities catalog. The first is a SharePoint Server code-injection bug affecting 2016, 2019, and Subscription Edition. The second is a RouterOS SSH authentication-flow...

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

Microsoft confirmed active exploitation of SharePoint flaw CVE-2026-65660, prompting CISA to add the RCE bug to its KEV list.

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows CVE-2026-65660 (CVSS score: 8.8) - A code injection vulnerability in Microsoft Office SharePoint

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint and Mikrotik RouterOS flaws flaws to its Known Exploited… Read more →

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog chayes Sep 25, 2026 Release DateSeptember 25, 2026 DescriptionCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2026-65660 Microsoft SharePoint Code Injection VulnerabilityCVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityThese types of vulnerabilities are a fre…