Vendor

MikroTik

Follow MikroTikFree accountCovers every MikroTik product. No need to list them.

5 known exploited

MikroTik news

HighPatchExploitedCISA KEV

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the…

Why it matters

CISA lists this as exploited in the wild. Unpatched SharePoint and RouterOS systems are exposed to active attacks now.

Patch

Apply the vendor's security update for SharePoint and RouterOS.

CISA Cybersecurity Advisories11 days agoEnterpriseSecurity pros

CriticalAct nowExploitedCISA KEV

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns

CISA added CVE-2026-67279 (MikroTik RouterOS) to its Known Exploited Vulnerabilities catalog on September 25, 2026, which means there is reliable evidence of exploitation in the wild. Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve…

Why it matters

CISA lists this as exploited in the wild. Unpatched RouterOS systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities11 days agoSecurity pros