// day
Sep 25, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Sep 25, 2026
Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability
› Microsoft SharePoint
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Added to CISA KEV on 2026-09-25.
CVE-2026-65660 - highclosedpatchedclosed Sep 25, 2026
WordPress Core: WordPress Core Remote File Inclusion Vulnerability
› WordPress Core
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution. Added to CISA KEV on 2026-09-25.
CVE-2026-87902
