Microsoft SharePoint Server Vulnerability CVE-2026-65660 Actively Exploited

A critical code injection vulnerability, CVE-2026-65660, affecting Microsoft SharePoint Server (2016, 2019, and Subscription Edition) is being actively exploited in the wild. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch by today, September 28, 2026.