CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog
Summary
CISA added a Microsoft SharePoint code injection flaw and a MikroTik RouterOS vulnerability to its KEV Catalog based on evidence of active exploitation, urging organizations to prioritize remediation.
Key points
- CISA added CVE-2026-65660, a Microsoft SharePoint code injection vulnerability, to the KEV Catalog.
- CISA added CVE-2026-67279, a MikroTik RouterOS improper enforcement of behavioral workflow vulnerability.
- CISA said both vulnerabilities have evidence of active exploitation.
- Federal civilian agencies must prioritize remediation under BOD 26-04, including checking for compromise in specified circumstances.
- CISA encourages all organizations to prioritize remediation of KEV-listed vulnerabilities using risk-based vulnerability management.
Article Details
- Vulnerability Types
- Code injection
- Improper enforcement of behavioral workflow
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown