CISA warns admins to patch actively exploited SharePoint flaws

CISA sounds alarm over trio of exploited SharePoint flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has urged all organizations running SharePoint to harden their defenses after the disclosure of actively exploited vulnerabilities. The warning applies to those running any supported version of SharePoint Server on-prem, with three vulnerabilities of particular interest cited. A spoofing bug, CVE-2026-32201 (6.5), was the first to be mentioned. Microsoft disclosed it in March and CIS…

CISA warns that multiple vulnerabilities in SharePoint are under exploitation

Security researchers say additional flaws are being chained together and a patch will not be available until August.

CISA warns admins to patch actively exploited SharePoint flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. [...]

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities

Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days. The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek.

CISA Sounds Alarm Over Active Microsoft SharePoint Attacks

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting multiple vulnerabilities affecting internet-facing on-premises Microsoft SharePoint Server deployments, prompting an urgent call for organizations to secure exposed systems. The agency said the flaws affect supported on-premises versions of SharePoint Server and are being used to bypass authentication, execute malicious code remotely,…