CISA Adds Two Known Exploited Vulnerabilities to Catalog

Key Points:

• CISA has added CVE-2026-16232 (Check Point SmartConsole) and CVE-2026-50522 (Microsoft SharePoint) to its Known Exploited Vulnerabilities Catalog due to active exploitation.
• These vulnerabilities pose significant risks to federal agencies, potentially allowing attackers total control over affected systems if exploited.
• Organizations are urged to prioritize rapid remediation of these high-risk vulnerabilities, especially on publicly exposed assets.

Technical Details: CVE-2026-16232 involves improper authentication in Check Point SmartConsole, while CVE-2026-50522 relates to deserialization of untrusted data in Microsoft SharePoint. Both vulnerabilities are frequently targeted by malicious actors.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned