Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-13 06:09 UTC
  • Importiert: 2026-08-20 12:22 UTC
  • CVSS: 9.1
  • Quelle-ID: thn_global
  • uid_hash: 821fe4532c1e8f35e420cd2ec92ecd18ee5d33172f9bb52ec693aabd398b6f51

Inhalt

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code.

The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday updates.

"The authentication

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-55040

CRITICAL

9.1

CRITICAL

9.1

2026-07-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews