SharePoint Server 2019

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenAug 11, 2026
Last mentionedSep 24, 2026

Timeline

5 articles · newest first

AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660

Canada’s Cyber Centre says SharePoint flaw CVE-2026-65660 is actively exploited for code execution.

Canadian Centre for Cyber SecuritySep 24, 17:12 UTC · Sep 24, 2026Exploit / PoCExploitedCVE-2026-656605 · 3 reads

Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code

CVE-2026-65660 allows authenticated low-privilege users to execute arbitrary code on vulnerable on-premises Microsoft SharePoint servers via a SafeControls bypass.

GBHackersSep 23, 08:53 UTC · Sep 23, 2026VulnerabilityCVE-2026-656603 · 1 read

CVE-2026-50522: Patch Critical SharePoint RCE Now

Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.

Web discovery (articles for new exploits & KEV entries)Sep 8, 09:32 UTC · Sep 8, 2026VulnerabilityCVE-2026-505223 · 1 read

CVE-2026-50522: Microsoft SharePoint Server RCE Vulnerability

CVE-2026-50522 is an unauthenticated .NET deserialization RCE in SharePoint Server Subscription, 2019, and 2016; Microsoft patched it July 14, 2026.

Web discovery (articles for new exploits & KEV entries)Sep 7, 19:42 UTC · Sep 7, 2026Vulnerability 3 sourcesCVE-2026-505223 · 2 reads

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Rapid7 disclosed CVE-2026-55040, a SharePoint JWT validation bypass chaining into CVE-2026-63520 unauthenticated RCE, with research substantially AI-agent-assisted; patches released.

The Hacker NewsAug 11, 16:49 UTC · Aug 11, 2026VulnerabilityCVE-2026-55040 CVE-2026-635203 · 2 reads

Related CVEs

by mentions

CVE-2026-505223%9.8
Unauthenticated Deserialization RCE in Microsoft SharePoint Server
published Jul 14, 2026Microsoft SharePoint Server (on-premises)KEV
CVE-2026-656608%8.8
Authenticated Code Injection RCE in Microsoft SharePoint Server
published Aug 11, 2026Microsoft SharePoint ServerKEVPoC ×2
CVE-2026-5504070%9.1
Authentication Bypass in Microsoft SharePoint Server
published Jul 14, 2026Microsoft SharePoint ServerKEVPoC ×2
CVE-2026-635203%8.1
Unauthenticated RCE in Microsoft SharePoint Server
published Aug 11, 2026Microsoft SharePoint Server (Office SharePoint, on-premises)

Appears with

Microsoftvendor · 5
SharePoint Server Subscription Editionproduct · 5
SharePoint Server 2016product · 3
Microsoftorganization · 2
CISAvendor · 2
Project Server 2013product · 1
Canadian Centre for Cyber Securityorganization · 1
Viettel Cyber Securityorganization · 1
SharePoint Server 2016 Enterpriseproduct · 1
CISAorganization · 1
Microsoft SharePoint Enterprise Server 2016product · 1
Microsoft SharePoint Serverproduct · 1
SentinelOnevendor · 1
Rapid7organization · 1
Office Web Apps 2013product · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.