Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-11 16:47 UTC
  • Importiert: 2026-08-19 09:30 UTC
  • CVSS: 9.1
  • Quelle-ID: thn_global
  • uid_hash: 59e56ea0f72b9848e15490c4f40ade2e639331f488a2b7d6005ffa41a054001c
The Hacker News

Inhalt

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent.

The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft's

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-55040

CRITICAL

9.1

CRITICAL

9.1

2026-07-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste