Critical SharePoint and RouterOS Flaws Now Actively Exploited—What West African Enterprises Need to Know
U.S. authorities have flagged two widely-used vulnerabilities as actively weaponised, putting organisations across the region at immediate risk if patching is delayed.
Two significant vulnerabilities affecting Microsoft SharePoint and Mikrotik RouterOS have been formally added to the U.S. Cybersecurity and Infrastructure Security Agency’s list of known exploited flaws. This designation carries real weight: it signals that threat actors are actively weaponising these gaps in the wild, not merely theorising about them.
For West African enterprises, the timing matters. Many organisations across Ghana and the broader region still run older versions of these technologies—SharePoint particularly remains embedded in document management and collaboration workflows across government agencies, financial institutions, and large corporates. Mikrotik routers are equally prevalent in regional network infrastructure, especially in environments where cost-effective networking solutions are prioritised.
The Immediate Risk
Once a vulnerability lands on CISA’s exploited list, it becomes a priority target for opportunistic attackers. Organisations that haven’t patched face heightened exposure over the next 12–18 months as exploit code becomes more accessible and attack campaigns intensify. In a region where IT teams are often stretched thin and patch management cycles can lag, this creates a dangerous window.
The RouterOS flaw is particularly concerning for network perimeter security. If your organisation relies on Mikrotik equipment to segment traffic or protect internal systems, an unpatched device becomes a direct entry point for lateral movement and data exfiltration.
What You Should Do Now
First, audit your environment. Identify which systems run SharePoint and which network devices use RouterOS. Second, prioritise patching—these aren’t optional updates. Third, if you lack in-house capacity to manage patch cycles reliably, this is a strong signal to engage managed security services or infrastructure support.
At GDS Africa, we help West African enterprises maintain security posture across their infrastructure. Whether it’s HPE-based data centre environments, hybrid cloud deployments, or network hardening, we can help you assess exposure to known exploits and build patching workflows that actually stick. We understand the regional context—budget constraints, resource limitations, and the reality of running lean IT teams.
Don’t wait for an incident to force the issue. Reach out to discuss your patch management strategy heading into 2027.