Defused Cyber Observes Exploitation of SharePoint RCE CVE-2026-50522

Defused Cyber disclosed that threat actors are exploiting CVE-2026-50522 to deliver .NET deserialization payloads to SharePoint sign-in endpoints without authentication.