Vulnerability Watch, September 26, 2026: 4 critical CVEs and 6 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
Author: TechUpscale Newsroom
BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
BreakingMicrosoft SharePoint flaw CVE-2026-65660 is being actively exploited, CISA warns
CISA added the Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
BreakingWordPress Core flaw CVE-2026-87902 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.