SharePoint zero-days CVE-2025-53770 and 53771 exploited by ToolShell
12d ago
Source
ThreatLockerSharePoint zero-days CVE-2025-53770 and 53771 exploited by ToolShellthreatlocker.comToolShell is a set of critical, actively exploited vulnerabilities affecting SharePoint Server 2016, 2019, and Subscription Edition. It enables unauthenticated remote code execution via chained CVEs (2025-53771 and 2025-53770). Organizations should urgently apply patches, enable AMSI, rotate machine keys, and follow tailored ThreatLocker recommendations to mitigate risk.
You might also wanna read
Microsoft SharePoint Under Active Exploitation, Warns CISA
Packetlabs·11mo ago
Microsoft patches high-severity SharePoint RCE vulnerability CVE-2026-45659
Microsoft has patched a high-severity remote code execution vulnerability (CVE-2026-45659) in SharePoint that affects SharePoint Server Subs
helpnetsecurity.com·1mo ago
WAF - WAF Release - 2025-07-21 - Emergency
Cloudflare·11mo ago
CISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
CISA has added CVE-2026-45659, a remote code execution vulnerability in on-premises Microsoft SharePoint Server, to its Known Exploited Vuln
theregister.com·5d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
CISA has added CVE-2026-45659, a remote code execution vulnerability in on-premises Microsoft SharePoint Server, to its Known Exploited Vuln
theregister.com·5d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
CISA has added CVE-2026-45659, a remote code execution vulnerability in on-premises Microsoft SharePoint Server, to its Known Exploited Vuln
theregister.com·5d ago
Microsoft releases critical security patch for SharePoint deserialization vulnerability
Microsoft has released May updates for SharePoint servers that patch a highly critical security vulnerability (CVE-2026-45659, CVSS 8.8). Th
heise.de·1mo ago
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
thehackernews.com·6d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.