Cybersecurity update: Vulnerability Impacting Microsoft SharePoint Server – CVE-2026-65660, Mikrotik security advisory (AV26-887) – Update 2, and Roundcube security advisory (AV26-503) – Update 1

These are official cybersecurity alerts from the past week that may affect small and medium businesses. Each item is summarised from the source and links back to it. If you run the products named below, apply the vendor’s updates.

Vulnerability Impacting Microsoft SharePoint Server – CVE-2026-65660

Canadian Centre for Cyber Security, 24 September 2026.

Number: AL26-023Date: September 24, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The Canadian Centre for Cyber Security (Cyber Centre) is…

If these products are in use, apply the vendor updates and read the advisory: official source.

Mikrotik security advisory (AV26-887) – Update 2

Canadian Centre for Cyber Security, 25 September 2026.

Serial Number: AV26-887Date: September 8, 2026Updated: September 25, 2026 As of September 3, 2026, Mikrotik is affected by vulnerabilities in the following product: RouterOS Prior to 6.49.21 Prior to 7.23.4 Prior to 7.24.2 Prior to 7.25 beta 3 Open-source reporting indicates that CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060 related to MikroTik are being exploited in the wild. Update 1 On September 10, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-CVE-2026-67277 and CVE-2026-86060 to their Known Exploited Vulnerabilities (KEV) Database. Update 2…

If these products are in use, apply the vendor updates and read the advisory: official source.

Roundcube security advisory (AV26-503) – Update 1

Canadian Centre for Cyber Security, 21 September 2026.

Serial number: AV26-503Date: May 25, 2026Updated: September 21, 2026 On May 24, 2026, Roundcube published security advisories to address vulnerabilities in the following product: Roundcube Webmail – versions prior to 1.6.16 Roundcube Webmail – versions prior to 1.7.1 Update 1 Open-source reporting indicates that CVE-2026-48842 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. Roundcube Webmail 1.6.16 Roundcube Webmail 1.71 Roundcube Open Source Webmail Software

If these products are in use, apply the vendor updates and read the advisory: official source.

How Techloom can help

Techloom can review devices, email filtering and Microsoft 365 settings as a security assessment or through managed IT support. We do not guarantee that any control prevents every attack.