cve-2026-55040

2 articles · newest first

Microsoft SharePoint interface on a laptop screen in an office setting

Microsoft's SharePoint bug had a missing half. Someone just published it — and honeypots are already lighting up

The JWT auth bypass we told you about two weeks ago just got its second half: a working RCE chain, two public PoCs, and active probing as of this week.

Priya Nair · Aug 27 · 7 min

A Microsoft office building — CVE-2026-55040 affects on-premises SharePoint Server, not SharePoint Online

Software

a researcher posted SharePoint exploit code on Tuesday. attackers were forging admin access by Thursday

Microsoft patched this JWT flaw back in July. A public proof-of-concept turned it into real attacks in under 48 hours — here's exactly what's broken and how to check if you're exposed.

Priya Nair · Aug 20 · 6 min