SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The US Cybersecurity and Infrastructure Security Agency has added two security flaws to its Known Exploited Vulnerabilities catalog, indicating they are being actively exploited. One of the vulnerabilities is a code injection issue in Microsoft Office SharePoint, identified as CVE-2026-65660, with a CVSS score of 8.8. The other vulnerability affects Mikrotik RouterOS. CISA's action suggests that attackers are currently taking advantage of these flaws. The agency's catalog update is based on evidence of active exploitation of these vulnerabilities.