CISA Warns of Microsoft SharePoint Code Injection Vulnerability Exploited in Attacks
CISA added actively exploited SharePoint code-injection flaw CVE-2026-65660 to the KEV catalog, with federal fixes due September 28.
Stories per day · 30 days
2 RSS
8 stories, newest first · one card per story
Stories tagged #cve-2026-65660
Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
Attackers are exploiting patched Microsoft SharePoint flaw CVE-2026-65660, which CISA added to KEV.
2
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
CISA listed actively exploited SharePoint RCE and MikroTik RouterOS flaws in the KEV catalog.
5
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
CISA added exploited Microsoft SharePoint and MikroTik RouterOS flaws to KEV, due September 28.
AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660
Canada’s Cyber Centre says SharePoint flaw CVE-2026-65660 is actively exploited for code execution.
5
Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code
CVE-2026-65660 allows authenticated low-privilege users to execute arbitrary code on vulnerable on-premises Microsoft SharePoint servers via a SafeControls bypass.
4
Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges
Microsoft patched CVE-2026-65660, an authenticated SharePoint Server remote code execution flaw scored 8.8.
2
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Researchers show SharePoint CVE-2026-65660 enables authenticated RCE, despite Microsoft first listing it as spoofing.
2