VulnerabilityBleeping Computer
9.8 — CRITICAL
Critical SharePoint RCE flaw exploited to steal machine keys
Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Hackers are exploiting CVE-2026-50522 in Microsoft SharePoint to steal machine keys, allowing them to maintain access even after patched servers are restarted. This vulnerability was addressed in July's security updates but has been actively exploited since then.
⚙️Technical Details
CVEs
CVE-2026-50522
Affected Systems
Microsoft SharePoint Server
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Organizations with on-premise vulnerable SharePoint deployments
🛡️Recommended Actions
1Apply the latest SharePoint security updates to patch the vulnerability
2Rotate credentials on any asset that may have been exposed
3Monitor for suspicious activity and implement additional security controls
📦Affected Products
Microsoft Sharepoint ServerMicrosoft SharePoint Server
🔐NVD Verified DataVERIFIED
CVE-2026-50522 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-502
Affected Products (CPE)
Microsoft Sharepoint Server
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.