Microsoft Patches Share Point RCE Flaw CVE-2026-45659 Across Server Versions
Summary: Microsoft released updates for a SharePoint remote code execution vulnerability tracked as CVE-2026-45659 with a CVSS score of 8.8 and important severity. Microsoft said deserialization of untrusted data allows an authenticated attacker with a minimum of Site Member permissions to execute code over a network without elevated privileges, and credited researcher MEOW for reporting the flaw.
What's compelling: An attacker needs only Site Member permissions, not administrator rights, to run code on the SharePoint Server, and Microsoft's own note that exploitation is less likely sits against a history of SharePoint flaws being repeatedly weaponized.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-32201CVE-2026-45659
- Related