🟠High: SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited flaws to its Known Exploited Vulnerabilities (KEV) catalog, confirming evidence of exploitation in the wild.
The first is CVE-2026-65660, a code injection vulnerability in Microsoft Office SharePoint carrying a CVSS score of 8.8. This flaw allows remote code execution, making it a serious risk for organizations running affected SharePoint deployments.
The second vulnerability affects MikroTik RouterOS. While the advisory does not provide a specific CVE identifier for this flaw in the available details, its inclusion in the KEV catalog signals that attackers are already leveraging it in real-world campaigns.
Given that both flaws are under active exploitation, defenders should treat them as urgent. Recommended actions include:
- Review the CISA KEV catalog entry for both vulnerabilities and apply any available vendor patches immediately
- Prioritize remediation for internet-facing SharePoint servers and MikroTik RouterOS devices
- Monitor for signs of compromise on affected systems and restrict unnecessary external exposure
- Track vendor advisories from Microsoft and MikroTik for updated guidance
Source: The Hacker News
Has your organization already patched these flaws, or are you still assessing exposure across your SharePoint and MikroTik infrastructure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login