CISA Adds CVE-2026-65660 in SharePoint to Actively Exploited Vulnerabilities
CISA added the CVE-2026-65660 vulnerability in on-premises Microsoft SharePoint servers to its KEV catalog. Microsoft has released fixes for three supported editions.
Tag vulnerabilities
Google and Mandiant Report New Mass Attacks on Oracle PeopleSoft via CVE-2026-35273
Google Threat Intelligence Group and Mandiant have observed renewed mass exploitation of a critical vulnerability in Oracle PeopleSoft. Attackers bypassed some WAF rules using a percent-encoded path to the vulnerable endpoint.
Updated: Kiteworks Fixes Critical Advanced Forms Vulnerability; Hosted Environments Operating Normally
During a precautionary shutdown, Kiteworks identified and fixed a critical vulnerability limited to Advanced Forms. The company says hosted environments are operating normally and has no indication of exploitation.
CISA Adds Microsoft SharePoint Vulnerability to Actively Exploited Flaws
CISA added CVE-2026-65660 in on-premises Microsoft SharePoint to its catalog of actively exploited vulnerabilities. Fixes are available for the affected versions.
CISA Adds MikroTik RouterOS Vulnerability CVE-2026-67279 to Actively Exploited Vulnerabilities
CISA added MikroTik RouterOS vulnerability CVE-2026-67279 to the KEV catalog. Administrators are advised to update and restrict SSH access.
CISA Adds CVE-2026-71362 in Adobe Commerce and Magento to Actively Exploited List
The U.S. agency CISA lists a critical vulnerability in Adobe Commerce, Adobe Commerce B2B and Magento Open Source as actively exploited. Patches have been available since August.
CISA Adds CVE-2026-5430 in WSO2 to Actively Exploited Vulnerabilities; Description Differs from Vendor
CISA added the CVE-2026-5430 vulnerability in WSO2 products to the KEV catalog. The vendor describes it as a JWT authentication bypass, while the CISA entry uses a different characterization of the flaw.
Chrome 154 Fixes 108 Security Vulnerabilities, Including 11 Critical Flaws
Google released Chrome 154 for Windows, macOS, and Linux. The update fixes 108 security flaws, 11 of which are rated Critical.
PoC for CVE-2026-80521 Is Public; Ubuntu Fixes Underway for Some Packages
Researchers at DepthFirst published exploit source code for a Linux kernel flaw. Canonical still lists the vulnerability as unfixed for some Ubuntu packages.
Check Point Releases Fixes for Critical CVE-2026-93616 Vulnerability
Check Point has released fixes for a critical vulnerability in its management servers. According to the vendor, CVE-2026-93616 was already being exploited in limited, targeted attacks in July.