VulnerabilitycriticalExploited in the wild

Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)

Help Net Securityby @zeljkazorzJul 22, 2026 · 00:00 UTC (Jul 22, 2026)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-50522 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-50522 CVE-2026-56164 CVE-2026-58644

Tags: cve-2026-50522 cve-2026-56164 cve-2026-58644 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-58644 +1 related CVE CVE-2026-50522	Unauthenticated Deserialization RCE in Microsoft SharePoint Server	9.8	16%	KEV	Jul 14, 2026 KEV Jul 16, 2026
CVE-2026-56164	Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation	9.8	1%	KEV	Jul 14, 2026 KEV Jul 14, 2026

From the original article

2 min read at helpnetsecurity.com

Attackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers’ IIS machine keys.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.