sharepoint

Microsoft SharePoint Server vulnerabilities, exploits, and administration topics.

microsoft

SharePoint Critical RCEs: CVE-2026-45659 + CVE-2026-56164

Technical Advisory & Lab Note: SharePoint Server Deserialization RCEs, Machine-Key Theft, and Post-Exploitation Persistence Date: 2026-07-23 Audience: On-premises SharePoint administrators (enterprise operators and homelab/self-hosted deployments) Format: Publishable document — combined advisory + lab-note Word Count: ~4,800 Status: Draft for review 1. Executive Summary

Threat Intel

URGENT ADVISORY: ToolShell — Critical SharePoint RCE Chain Under Active Exploitation

URGENT: CVE-2025-53770/53771 ToolShell exploit chain under active exploitation since July 17, 2025. If you run on-prem SharePoint Server, you are vulnerable to unauthenticated RCE.