> TritonInfoSec News
Home / Jul 03, 2026 / Story
0
#3 The Hacker News general July 02, 2026 at 05:46 UTC

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-45659, a CVSS 8.8 remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data, to its Known Exploited Vulnerabilities catalog after confirming active in-the-wild exploitation. The flaw was patched in May 2026, giving organizations a narrow remediation window before attackers moved. SharePoint Server admins should verify patch status immediately per CISA's Binding Operational Directive 22-01 timelines.

Read full article → https://thehackernews.com/2026/07/sharepoint-rce-c…

Relevance score: 85.0/100

# More from July 03

  1. 1
    FBI Seizes NetNut Proxy Platform, Popa Botnet Krebs on Security
  2. 2
    FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations The Hacker News
  3. 4
    Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials The Hacker News
  4. 5
    AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack The Hacker News
  5. 6
    Cisco finally confirms attackers exploiting Unified CM flaw BleepingComputer
  6. 7
    New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos The Hacker News
  7. 8
    Hackers target Microsoft 365 accounts with 81 million login attempts BleepingComputer
  8. 9
    Spyware found on phone of European Parliament member probing it The Record
  9. 10
    Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities SecurityWeek