cve-2026-50522 — news and analysis

A hooded figure at a computer in the dark, representing a cyberattack

another SharePoint RCE is being exploited right now — CVE-2026-50522 is a 9.8 and the exploit is public

An unauthenticated attacker can run code on your SharePoint server with a single crafted request. There's a public PoC, it's under active exploitation, and Microsoft already shipped the fix. Patch today.

Priya Nair · 2h ago · 10 min