2026-004: Critical Vulnerability in SharePoint Exploited
CVE-2026-20963 (CVSS 9.8), an unauthenticated RCE in on-prem SharePoint, was added to CISA's KEV on 18 March 2026 and is actively exploited.
3
Stories per day · 30 days
2 RSS
7 stories, newest first · one card per story
Stories tagged #cve-2026-20963
Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026
4
Week in review: ScreenConnect servers open to attack, exploited Microsoft SharePoint flaw
2
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero
1
CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963)
2
U.S. CISA adds Microsoft SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities catalog
1
Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero
2