Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

AI Summary

Researchers disclosed CVE-2026-55040 (CVSS 9.1), an unauthenticated RCE vulnerability affecting Microsoft SharePoint Server Subscription Edition, 2019, and 2016, which was partially discovered using an AI agent. CISA has since confirmed (article 7434) that ransomware gangs are actively exploiting a related SharePoint RCE flaw flagged since early July, making immediate patching of all SharePoint Server deployments critical for defenders.

Read full article → https://thehackernews.com/2026/08/researchers-disc…

Relevance score: 85.0/100

# More from August 12

1
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack The Hacker News
2
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks The Hacker News
3
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt The Hacker News
4
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing The Hacker News
6
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client The Hacker News
7
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine The Hacker News
8
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands The Hacker News
9
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers The Hacker News
10
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices The Hacker News