watchTowr Detects Active Exploitation of SharePoint RCE CVE-2026-50522

watchTowr reported active exploitation of CVE-2026-50522 against on-premises SharePoint deployments, with attackers stealing machine keys via a single request.