A critical vulnerability in Microsoft SharePoint Server, initially categorized by Microsoft as a spoofing flaw with a Common Vulnerability Scoring System (CVSS) score of 6.5, has been revealed to enable authenticated remote code execution (RCE).
Reports mentioning SharePoint Server
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday, October 24, 2023, the addition of four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are confirmed to be actively exploited in the wild, posing…
A critical vulnerability in Microsoft Office SharePoint, designated CVE-2026-50522, is currently under active exploitation, according to a July 2026 report by watchTowr. This flaw, which carries a CVSS score of 9.8, involves the deserialization of untrusted data within SharePoint Server.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical remote code execution (RCE) vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog on Thursday. This newly patched flaw, identified as CVE-2026-58644, carries a critical CVSS…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday, March 12, 2024, detailing that malicious actors are actively exploiting three vulnerabilities in Internet-exposed, on-premises SharePoint Server instances.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday, citing evidence of active exploitation.