Windows Report

Critical SharePoint Exploit Is Already Being Used in Attacks

Rapid7’s SharePoint PoC was reportedly weaponized within a day, targeting servers vulnerable to CVE-2026-55040.

Hackers leverage new Microsoft SharePoint exploit in attacks

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution ...
SecurityWeek

Fresh SharePoint Vulnerability Exploited Soon After Disclosure

Threat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns. Tracked as CVE-2026-58644 (CVSS ...