Federal civilian executive branch agencies face today’s mandatory compliance deadline under Binding Operational Directive 22-01 to remediate two actively exploited enterprise vulnerabilities. Systems remaining unpatched face mandatory network disconnection orders across federal enterprises.
The mandatory remediation mandate applies to Microsoft SharePoint Server code injection vulnerability CVE-2026-65660 and MikroTik RouterOS SSH state-machine vulnerability CVE-2026-67279. Threat telemetry confirms adversaries actively exploiting SharePoint to execute arbitrary code on internal servers, while edge routing appliances face active exploitation under the MikroTrick attack chain to obtain unauthenticated administrative control.
Failing to remediate cataloged edge routing and collaboration server vulnerabilities leaves internal enterprise networks vulnerable to persistent footholds. When adversaries compromise internal collaboration servers or edge routers, unmonitored access permits threat networks to extract sensitive files and execute lateral movement sweeps across enterprise subnets.
– Upgrade on-premises Microsoft SharePoint Server installations immediately to current patched maintenance builds.
– Force immediate RouterOS software upgrades across all edge routing hardware to maintenance releases published by MikroTik.
– Inspect SharePoint application execution logs for anomalous child processes or unauthorized code injection artifacts.
– Verify RouterOS device-mode status using administrative console commands to ensure system flags have not been modified.
Collaboration server and edge network defense demands strict adherence to threat-informed remediation deadlines and proactive log auditing to guarantee enterprise hosts remain protected from active exploitation. #CodeDefence #Microsoft #SharePoint #MikroTik #RouterOS #CISA #KEV #PatchManagement #AppSec
/
