CISA adds Microsoft SharePoint CVE-2026-65660 and MikroTik RouterOS CVE-2026-67279 to KEV catalog over active exploitation
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-65660, a code injection flaw in Microsoft SharePoint, and CVE-2026-67279, an improper enforcement of behavioral workflow flaw in MikroTik RouterOS. CISA describes these vulnerability types as a frequent at…