2026-009: Critical Vulnerabilities in Microsoft SharePoint
[UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Server instances, including CVE-2026-32201, CVE-2026-45659, CVE-2026-56164, and CVE-2026-58644. CERT-EU…
KEV ✓ EPSS 0.77 CVE-2026-32201 CVE-2026-45659 CVE-2026-50522 CVE-2026-56164 CVE-2026-58644 Microsoft EU