CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. These include CVE-2026-65660, a code injection flaw in Microsoft Office SharePoint, and a chain of MikroTik RouterOS SSH vulnerabilities (CVE-2026-67279 and CVE-2026-86060) that allow unauthenticated administrative control. Organizations are urged to patch these vulnerabilities immediately to prevent compromise.