SharePoint Server 2019 Affected by Critical Flaws
SharePoint Server 2019 is affected by both CVE-2026-55040 and CVE-2026-63520. The July update (KB5002883) breaks the chain, but the product reached end…
Tag: SharePoint
SharePoint Server 2016 Affected by Critical Flaws
SharePoint Server 2016 is affected by both CVE-2026-55040 and CVE-2026-63520. The July update (KB5002891) breaks the chain, but the product reached end…
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
A critical remote code execution vulnerability in Microsoft SharePoint Server, CVE-2026-50522 (CVSS 9.8), is being actively exploited in the wild following the…
DEVCORE Researcher Discovered SharePoint RCE CVE-2026-50522
DEVCORE researcher splitline discovered and reported the critical SharePoint RCE vulnerability CVE-2026-50522 to Microsoft.
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…
CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
SharePoint Vulnerability CVE-2026-32201 Under Active Exploitation
A SharePoint Server vulnerability exploited by threat actors to gain unauthorized access to on-premises instances, as warned by CISA.
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
KEVIntel Telemetry Shows Spike in SharePoint Exploitation
KEVIntel captured telemetry data revealing 12 exploitation attempts targeting CVE-2026-55040 since July 19, 2026. Eight of these attempts occurred on August 12-13,…