Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-21 14:57 UTC
  • Importiert: 2026-07-28 05:30 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 7b1a0bb083acc9cda5e3eba79c37dee459bbe5460179308c6f0cd155b49a1ade

Inhalt

A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr.

The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft Office SharePoint that could allow an unauthorized attacker to execute code over a network. Microsoft credited DEVCORE

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-50522

CRITICAL

9.8

CRITICAL

9.8

2026-07-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews