<![CDATA[🟠 High: SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild]]>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited flaws to its Known Exploited Vulnerabilities (KEV) catalog, confirming evidence of exploitation in the wild.

The first is CVE-2026-65660, a code injection vulnerability in Microsoft Office SharePoint carrying a CVSS score of 8.8. This flaw allows remote code execution, making it a serious risk for organizations running affected SharePoint deployments.

The second vulnerability affects MikroTik RouterOS. While the advisory does not provide a specific CVE identifier for this flaw in the available details, its inclusion in the KEV catalog signals that attackers are already leveraging it in real-world campaigns.

Given that both flaws are under active exploitation, defenders should treat them as urgent. Recommended actions include:

  • Review the CISA KEV catalog entry for both vulnerabilities and apply any available vendor patches immediately
  • Prioritize remediation for internet-facing SharePoint servers and MikroTik RouterOS devices
  • Monitor for signs of compromise on affected systems and restrict unnecessary external exposure
  • Track vendor advisories from Microsoft and MikroTik for updated guidance

Source: The Hacker News

Has your organization already patched these flaws, or are you still assessing exposure across your SharePoint and MikroTik infrastructure?

]]>https://xploitlk.com/topic/473/high-sharepoint-rce-and-mikrotik-routeros-flaws-actively-exploited-in-the-wildRSS for NodeTue, 27 Oct 2026 10:38:05 GMTSat, 26 Sep 2026 12:30:19 GMT60