vulnerability
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Critical
Summary
Threat actors are actively exploiting a critical Microsoft SharePoint vulnerability (CVE-2026-55040) due to a bypass in the authentication feature. Following the release of a proof-of-concept by Rapid7, attackers are leveraging this flaw to impersonate users and potentially access sensitive data. The vulnerability has seen a significant increase in exploitation attempts since the PoC's release.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data