CVE-2026-50522: Patch Critical SharePoint RCE Now
Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.
3
Stories per day · 30 days
2 RSS
11 stories, newest first · one card per story
Stories tagged #cve-2026-50522
2026-009: Critical Vulnerabilities in Microsoft SharePoint
WatchTowr observed active exploitation of SharePoint RCE CVE-2026-50522 (CVSS 9.8), part of an ongoing wave of exploited on-prem SharePoint flaws patched by Microsoft.
200 accounts compromised in Swiss government's Microsoft SharePoint breach
2
SharePoint Flaws Used to Hack Switzerland's Federal IT Agency
4
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog
2
Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached
2
AI-driven bug hunting fuels record Microsoft Patch Tuesday
3
Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)
2
Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026
4
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After ...
1
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
3