SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Researchers show SharePoint CVE-2026-65660 enables authenticated RCE, despite Microsoft first listing it as spoofing.
2
Stories per day · 30 days
1 RSS
9 stories, newest first · one card per story
Stories tagged #cve-2026-55040
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Attackers exploit SharePoint authentication bypass CVE-2026-55040 (CVSS 9.1) after Rapid7's PoC release, with 12 exploitation attempts recorded since July 19, 2026.
2
SharePoint CVE-2026-55040 Comes Under Attack Following Public Exploit
Attackers are actively exploiting critical SharePoint authentication bypass CVE-2026-55040 (CVSS 9.1) days after Rapid7 released a public PoC.
4
Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)
Attackers use Rapid7's public PoC to exploit CVE-2026-55040, a critical SharePoint authentication bypass patched in July 2026.
1
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
Rapid7 and Microsoft disclose CVE-2026-63520, a SharePoint RCE that chains with CVE-2026-55040 for unauthenticated RCE; patches released.
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
Rapid7's analysis of SharePoint auth bypass CVE-2026-55040 includes a PoC for unauthenticated admin-level operations.
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
3
Microsoft smashes Patch Tuesday record for second successive month
3
Microsoft Patches Record 622 Flaws, Including Two Zero
4