CVE-2026-55040 – CyberSecurityBoard

Critical CVEs

Researcher Releases Windows Zero-Day PoC LegacyHive Hours After July 2026 Patch Tuesday

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit called LegacyHive, targeting a Windows User Profile Service (ProfSvc) arbitrary…

Action1 Active Directory Federation Services active exploitation authentication bypass

July 15, 2026

Critical CVEs

SharePoint Server Authentication Bypass Vulnerability (CVE-2026-55040)

CVE-2026-55040 is a critical SharePoint Server security feature bypass vulnerability with a CVSS score of 9.1. It allows remote unauthenticated attackers to…

authentication bypass CVE-2026-55040 JWT Token Validation SharePoint Server

July 14, 2026

Critical CVEs

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft shipped its largest Patch Tuesday on record, addressing 622 CVEs, more than triple the previous high. Two zero-days are under active…

Active Directory Federation Services Azure BitLocker CISA KEV

July 14, 2026