Tag

#SharePoint

3 articles tagged #SharePoint.

Cybersecurity/Vulnerability Management·Aug 20, 2026·6 min read

CVE-2026-55040: SharePoint JWT Identity Forgery

A CVSS 9.1 flaw in SharePoint's JWT validation lets an unauthenticated attacker impersonate any user. CISA confirmed exploitation, with an August 21 deadline.

CybersecurityCVESharePoint

Read

July 2026 Patch Tuesday: Microsoft's Biggest Ever, Two Zero-Days, and a Kerberos Deadline

P.02

Cybersecurity/Vulnerability Management·Jul 16, 2026·5 min read

July 2026 Patch Tuesday: 622 CVEs, Two Zero-Days

Microsoft fixed 622 CVEs on July 14, its largest ever, including exploited zero-days in SharePoint and AD FS, plus the RC4 Kerberos rollback switch removal.

SecurityCybersecurityCVE

Read

CVE-2026-45659: The SharePoint RCE That's Now Under Active Exploitation

P.03

Cybersecurity/Vulnerability Management·Jul 3, 2026·4 min read

CVE-2026-45659: SharePoint RCE Under Active Attack

CISA added the SharePoint deserialization bug CVE-2026-45659 to its KEV catalog on July 1, with a July 4 deadline. Who's affected, and what to patch now.

SecurityCybersecurityCVE

Read