CISA adds Microsoft, MikroTik, Adobe, and WSO2 flaws to KEV catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several critical security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation.

Among the new additions are flaws in Microsoft SharePoint Server (CVE-2026-65660), a code injection vulnerability affecting versions 2016, 2019, and Subscription Edition. Additionally, MikroTik RouterOS (CVE-2026-67279) faces an SSH protocol flaw that allows unauthenticated attackers to bypass authentication and execute commands. Reports indicate this flaw can be chained with other vulnerabilities to grant full administrative access.

CISA also identified critical flaws in WSO2 and Adobe Commerce/Magento. The WSO2 vulnerability (CVE-2026-5430) is a path traversal flaw that could lead to remote code execution. The Adobe Commerce flaw (CVE-2026-71362) involves incorrect authorization, potentially allowing attackers to switch customer sessions to gain access to private data.

Federal Civilian Executive Branch (FCEB) agencies are directed to address these vulnerabilities by specified deadlines to mitigate risks to their networks.