> TritonInfoSec News
Home / Jul 18, 2026 / Story
0
#1 The Hacker News general July 17, 2026 at 06:42 UTC

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-58644 (CVSS 9.8), a critical deserialization RCE flaw in Microsoft SharePoint Server, to its Known Exploited Vulnerabilities catalog, mandating Federal Civilian Executive Branch agencies patch by July 19, 2026. Active exploitation was confirmed shortly after disclosure, making this an urgent priority for any organization running SharePoint Server on-premises.

Read full article → https://thehackernews.com/2026/07/cisa-adds-exploi…

Relevance score: 92.0/100

# More from July 18

  1. 2
    New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code The Hacker News
  2. 3
    Inc Ransomware Exploits SonicWall SMA Zero-Days Dark Reading
  3. 4
    OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests The Hacker News
  4. 5
    Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack The Hacker News
  5. 6
    Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack SecurityWeek
  6. 7
    CISA urges immediate action on actively exploited Fortinet flaws BleepingComputer
  7. 8
    GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft The Hacker News
  8. 9
    New Windows LegacyHive zero-day gives hackers admin privileges BleepingComputer
  9. 10
    Now, even Russia's most elite hackers are using Clickfix to infect devices Ars Technica Security