Topic

SharePoint

3 reports tagged SharePoint, spanning news, vulnerability and campaign coverage.

News
CISA confirms exploitation of SharePoint and MikroTik RouterOS flaws

CISA added a SharePoint code injection flaw and a MikroTik RouterOS SSH bug that completes a known router takeover chain to KEV, with a 28 September deadline.

known-exploited-vulnerabilitiessharepointmikrotik +2

2026-09-25
Vulnerability
Microsoft SharePoint Input Validation Flaw (CVE-2026-63520)

CVE-2026-63520 is a CVSS 8.1 improper input validation flaw in Microsoft SharePoint, reported exploited by VulnCheck alone.

microsoftsharepointinput-validation +3

2026-09-20
Campaign
SharePoint ToolShell Exploitation

July 2025 exploitation campaign against on-premises Microsoft SharePoint servers via incompletely patched spoofing and RCE vulnerabilities, later reissued as CVE-2025-53770/53771, exploited by a ransomware actor and two espionage groups.

sharepointtoolshellcve-2025-53770 +2

2026-08-29