THREAT OPS › Threat News › CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
<p>CISA has added two new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-67277" target="_blank">CVE-2026-67277</a> MikroTik RouterOS Missing Authentication for Critical Function Vulnerability</li>
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2026-67277cve
- CVE-2026-86060cve
- https://www.cve.org/CVERecord?id=CVE-2026-67277url
- https://www.cve.org/CVERecord?id=CVE-2026-86060url
- https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3wurl