> TritonInfoSec News
Home / Jul 23, 2026 / Story
0
#3 The Hacker News general July 21, 2026 at 14:57 UTC

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

By [email protected] (The Hacker News)

AI Summary

CVE-2026-50522, a critical (CVSS 9.8) deserialization vulnerability in Microsoft SharePoint Server, is under active exploitation following public PoC release, marking the fourth SharePoint flaw exploited in a single month's wave of attacks. Threat actors are leveraging it to steal machine keys and maintain persistent access. Security teams running SharePoint should treat this as an emergency patch priority given the July 2026 Patch Tuesday fix and rapid weaponization timeline.

Read full article → https://thehackernews.com/2026/07/critical-sharepo…

Relevance score: 90.0/100

# More from July 23

  1. 1
    OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark The Hacker News
  2. 2
    Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA The Hacker News
  3. 4
    Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data The Hacker News
  4. 5
    Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication The Hacker News
  5. 6
    Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents The Hacker News
  6. 7
    CISA orders urgent action on actively exploited Langflow RCE flaw BleepingComputer
  7. 8
    Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs The Hacker News
  8. 9
    LG to Ban Residential Proxies from Smart TV Apps Krebs on Security
  9. 10
    AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code The Hacker News