Share Point RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Summary: CISA added CVE-2026-45659, a high-severity deserialization remote code execution flaw in Microsoft SharePoint Server with a CVSS score of 8.8, to its Known Exploited Vulnerabilities catalog on Wednesday, citing evidence of active exploitation. Microsoft patched the flaw in May 2026 for SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016, and noted that any authenticated attacker with a minimum of Site Member permissions could execute code remotely without admin or elevated privileges.
What's compelling: An attacker needs only Site Member permissions to run code on the server, and on August 11, 2026, CISA confirmed the flaw is being exploited by ransomware groups, with FCEB agencies directed to apply fixes by July 4, 2026.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-11371CVE-2026-45659
- Related
- CVE-2026-45659: Microsoft Share Point Server Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Jul 01, 2026CVE-2025-11371: Gladinet Centre Stack and Triofox Files or Directories Accessible to External Parties Vulnerability Known Exploited Vulnerabilities · Nov 04, 2025