SharePoint Server 2016

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 11, 2026
Last mentionedSep 24, 2026

Timeline

3 articles · newest first

AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660

Canada’s Cyber Centre says SharePoint flaw CVE-2026-65660 is actively exploited for code execution.

Canadian Centre for Cyber SecuritySep 24, 17:12 UTC · Sep 24, 2026Exploit / PoCExploitedCVE-2026-656605 · 3 reads

Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code

CVE-2026-65660 allows authenticated low-privilege users to execute arbitrary code on vulnerable on-premises Microsoft SharePoint servers via a SafeControls bypass.

GBHackersSep 23, 08:53 UTC · Sep 23, 2026VulnerabilityCVE-2026-656603 · 1 read

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Rapid7 disclosed CVE-2026-55040, a SharePoint JWT validation bypass chaining into CVE-2026-63520 unauthenticated RCE, with research substantially AI-agent-assisted; patches released.

The Hacker NewsAug 11, 16:49 UTC · Aug 11, 2026VulnerabilityCVE-2026-55040 CVE-2026-635203 · 2 reads

Related CVEs

by mentions

CVE-2026-656608%8.8
Authenticated Code Injection RCE in Microsoft SharePoint Server
published Aug 11, 2026Microsoft SharePoint ServerKEVPoC ×2
CVE-2026-5504070%9.1
Authentication Bypass in Microsoft SharePoint Server
published Jul 14, 2026Microsoft SharePoint ServerKEVPoC ×2
CVE-2026-635203%8.1
Unauthenticated RCE in Microsoft SharePoint Server
published Aug 11, 2026Microsoft SharePoint Server (Office SharePoint, on-premises)

Appears with

SharePoint Server Subscription Editionproduct · 3
SharePoint Server 2019product · 3
Microsoftvendor · 3
Microsoftorganization · 2
CISAorganization · 1
Viettel Cyber Securityorganization · 1
Canadian Centre for Cyber Securityorganization · 1
Microsoft SharePoint Serverproduct · 1
Rapid7organization · 1
Project Server 2013product · 1
Office Web Apps 2013product · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.