criticalCVE
CISA Adds Actively Exploited SharePoint and MikroTik Vulnerabilities to KEV Catalog
Two critical flaws, CVE-2026-65660 and an unnamed MikroTik RouterOS vulnerability, cited for active exploitation in the wild
CyberIntel Desk1 min read
Key Takeaways
- CISA has added two actively exploited vulnerabilities to its KEV catalog: CVE-2026-65660 for SharePoint and a MikroTik RouterOS flaw.
- CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint with a CVSS score of 8.8.
- Both vulnerabilities are being actively exploited in the wild, according to CISA.
Related Security News
highCVE
CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.
CISA Advisories2 min read
