NewsThe Hacker NewsSMEPublic sector

    Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

    A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft Office SharePoint that could allow an unauthorized attacker to execute code over a network. Microsoft credited DEVCORE

    Affected vendors and products

    More on SharePoint

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html

    ID