Exploit / PoCcriticalExploited in the wild

U.S. CISA urges FCEB agencies to fix two Microsoft SharePoint flaws immediately and added them to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJul 23, 2025 · 21:59 UTC (Jul 23, 2025)2 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-49704 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-49704 CVE-2025-49706 CVE-2025-53770

Tags: cve-2025-49704 cve-2025-49706 cve-2025-53770 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-49704 +1 related CVE CVE-2025-49706	Authenticated Code Injection RCE in Microsoft SharePoint	8.8 group max	100%	KEVRansomware	Jul 8, 2025 KEV Jul 22, 2025
CVE-2025-53770	Unauthenticated Deserialization RCE in Microsoft SharePoint Server on-premises	9.8	100%	KEVRansomwarePoC ×3	Jul 20, 2025 KEV Jul 20, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds two Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.