> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#1 BleepingComputer general July 21, 2026 at 20:06 UTC

Critical SharePoint RCE flaw exploited to steal machine keys

By Bill Toulas

AI Summary

CVE-2026-50522, a critical (CVSS 9.8) deserialization RCE flaw in Microsoft SharePoint Server, is being actively exploited to steal machine keys — allowing attackers to maintain persistent access even after patching. The technique is particularly dangerous because machine key theft enables forging ViewState tokens and achieving RCE on patched servers, meaning remediation requires key rotation in addition to patching.

Read full article → https://www.bleepingcomputer.com/news/security/cri…

Relevance score: 92.0/100

# More from July 22

  1. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  2. 3
    Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
  3. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  4. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  5. 6
    FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware BleepingComputer
  6. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  7. 8
    New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack The Hacker News
  8. 9
    Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes BleepingComputer
  9. 10
    HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 The Hacker News