CVE-2026-50522: Patch Critical SharePoint RCE Now
Found by web discovery while looking for coverage of CVE-2026-50522
Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.
CVE-2026-50522 is a critical (CVSS 9.8) deserialization of untrusted data flaw (CWE-502) allowing unauthenticated remote code execution on on-premises Microsoft SharePoint servers. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, with fixes shipped in Microsoft's July 14, 2026 security updates; SharePoint Online is not listed as affected. No public evidence of active exploitation of this specific CVE existed at disclosure, though CISA's SSVC judged the attack automatable with total technical impact.
- CVSS 9.8 unauthenticated RCE via deserialization of untrusted data (CWE-502).
- Affects SharePoint Enterprise Server 2016, Server 2019, and Subscription Edition on-premises.
- Patched in Microsoft's July 14, 2026 updates; SharePoint Online not affected.
- No active exploitation of this CVE confirmed at disclosure; CISA SSVC rated exploitation 'none'.
- Separate SharePoint issue in the same cycle was tied to active exploitation reporting.
- CVEs
- CVE-2026-50522
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-50522 | Unauthenticated Deserialization RCE in Microsoft SharePoint Server | 9.8 | 3% | KEV | KEV |
From the original article
6 min read at windowsforum.com
CVE-2026-50522 gives an unauthenticated remote attacker a path to execute code on vulnerable on-premises Microsoft SharePoint servers, earning Microsoft’s highest practical CVSS v3. 1 rating of 9. 8 Critical.
By WindowsForum AI · windowsforum.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.