SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

As cited

Copy frozen at 2026-09-26 11:07 UTC (site build).

vulnerabilities

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-65660, a code injection vulnerability in Microsoft Office SharePoint, and a MikroTik RouterOS flaw to its Known Exploited Vulnerabilities (KEV) catalog on September 26, 2026. Both flaws are being actively exploited in the wild.

Why it matters: SharePoint administrators and MikroTik device operators must prioritize patching these vulnerabilities immediately, as active exploitation poses direct risk to their systems and the CISA KEV listing signals widespread threat activity.

Source published

2026-09-26 08:49 UTC

First seen by Cybersecurity Tracker

2026-09-26 10:26 UTC