sharepoint

2 articles · newest first

the other SharePoint bug: a 9.8 that runs code with no login, already exploited and on CISA's list

Everyone focused on the SharePoint privilege-escalation zero-day. CVE-2026-58644 is worse: an unauthenticated deserialization flaw that runs code on the server, actively exploited, with a CISA deadline that's already passed.

Priya Nair · Jul 28 · 9 min

NVD detail page for CVE-2026-56164 showing a 9.8 CRITICAL score

Software

Microsoft called this SharePoint bug 'Moderate.' the NVD says it's a 9.8 — and hackers are already using it

Same vulnerability, two official severity scores that don't agree: Microsoft rates CVE-2026-56164 a 5.3, the National Vulnerability Database a 9.8. It's a zero-day being exploited right now. Here's who's right, and what to do.

Priya Nair · Jul 22 · 7 min