Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*

7 briefs RSS
critical threat

Active Exploitation of Code Injection Vulnerability in Microsoft SharePoint Server

Authenticated attackers are actively exploiting CVE-2026-65660, a code injection vulnerability in Microsoft SharePoint Server, to execute arbitrary code, with potential for pre-authentication RCE when chained with other flaws.

exploited SharePoint Enterprise Server 2016 +2 vulnerability rce exploitation sharepoint
2t 1c
high threat

Exploitation of CVE-2024-30043 XXE in Microsoft SharePoint Server

A publicly available exploit for CVE-2024-30043 allows unauthenticated remote attackers to perform XML External Entity (XXE) injection against Microsoft SharePoint Server via URL parsing confusion, potentially leading to sensitive data disclosure.

exploited SharePoint Server vulnerability xxe sharepoint cve-2024-30043
1t 1c
high threat

Microsoft Security Updates — August 2026

Roundup of Microsoft security advisories published in August 2026.

roundup
29c updated
critical threat

Check Point SmartConsole Authentication Bypass (CVE-2026-16232) Actively Exploited

Check Point released a critical security advisory to address CVE-2026-16232, an authentication bypass vulnerability in SmartConsole, which is actively being exploited in the wild and affects Security Management, Multi-Domain Management, Firewall, and Multi-Domain Log Server products.

exploited PoC SmartConsole +9 cve vulnerability authentication-bypass checkpoint
1t 4c 6i updated
critical threat

Microsoft Addresses Two Actively Exploited Zero-Day Vulnerabilities in July 2026 Patch Tuesday

Microsoft's July 2026 Patch Tuesday addressed 622 vulnerabilities, including two actively exploited zero-day elevation of privilege flaws, CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint, allowing local and remote attackers to gain administrative control.

exploited PoC Active Directory Federation Services +23 patch-tuesday zero-day vulnerability microsoft windows sharepoint active-directory-federation-services bitlocker +2
8t 4c 8i updated
high threat

Multiple Vulnerabilities in Microsoft Office Products (June 2026)

CERT-FR has disclosed 31 vulnerabilities in various Microsoft Office products, including CVE-2026-44803 and CVE-2026-47635, which could allow remote code execution, privilege escalation, and data confidentiality compromise.

exploited Microsoft 365 Apps pour Enterprise pour systèmes 32 bits +21 vulnerability microsoft-office remote-code-execution privilege-escalation data-confidentiality windows macos android
3r 4t 5c
high advisory

SharePoint spinstall0.aspx Webshell Activity

This brief describes the detection of GET requests to the spinstall0.aspx webshell, commonly deployed after exploiting CVE-2025-53770 in Microsoft SharePoint, indicating potential command execution, data exfiltration, or credential harvesting.

PoC sharepoint webshell cve-2025-53770 t1190 t1505.003 t1552
2r 3t 1c updated