ransomware
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
High
Summary
A high-severity remote code execution (RCE) vulnerability (CVE-2026-45659) in Microsoft SharePoint Server has been added to the CISA KEV catalog due to active exploitation. This vulnerability, stemming from deserializing untrusted data, allows authenticated attackers to execute code without elevated privileges. Microsoft is advising FCEB agencies to apply the fixes by July 4, 2026, alongside ongoing investigations revealing a parallel attack campaign utilizing Storm-2603 and targeting multiple organizations.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data