CISA Adds Two Known Exploited Vulnerabilities to Catalog

T1Critical 100Covered by 1 source · first reported by CISA advisories & alerts at 25 Sept, 12:00 UTC

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These…

security

Sources

T1CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA advisories & alerts25 Sept, 12:00

Vulnerabilities

CVE-2026-65660
CVE-2026-67279

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
ssvc active	35
cvss high — 8.8	10
public poc — 1 repositories	20
widely deployed	15