CISA Adds Two Known Exploited Vulnerabilities to Catalog

Two high-severity vulnerabilities in MikroTik RouterOS have been added to CISA's Known Exploited Vulnerabilities Catalog after confirmed active exploitation in the wild. The root issue is a failure to rapidly identify and remediate known vulnerabilities in internet-facing network infrastructure — devices that are particularly high-value targets for attackers seeking persistent access or lateral movement. CISA's Binding Operational Directive mandates timely remediation for federal agencies, but the risk extends to all organizations running unpatched RouterOS devices. Delays in patching widely-used network equipment can expose entire organizational networks to compromise, making proactive vulnerability management essential.