> TritonInfoSec News
Home / Sep 27, 2026 / Story
0
#3 The Hacker News general September 26, 2026 at 08:49 UTC

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

By [email protected] (The Hacker News)

AI Summary

CISA added two actively exploited flaws to its KEV catalog: CVE-2026-65660 (CVSS 8.8), a code injection vulnerability in Microsoft SharePoint, and a separate MikroTik RouterOS flaw. Federal agencies face mandatory remediation deadlines under KEV, and both products have broad enterprise and ISP deployment making rapid patching critical.

Read full article → https://thehackernews.com/2026/09/sharepoint-rce-a…

Relevance score: 88.0/100

# More from September 27

  1. 1
    Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells The Hacker News
  2. 2
    ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks BleepingComputer
  3. 4
    Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack The Hacker News
  4. 5
    Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise The Hacker News
  5. 6
    Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies CyberScoop
  6. 7
    CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks BleepingComputer
  7. 8
    Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials The Hacker News
  8. 9
    Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link The Hacker News
  9. 10
    Roundcube Webmail Vulnerability in Attackers’ Crosshairs SecurityWeek