Microsoft SharePoint Server flaws are being actively exploited to deploy web shells, steal IIS machine keys, and maintain long-term access to compromised enterprise environments. The attacks affect on-premises SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. SharePoint Online and Microsoft 365 are not affected. CISA has added CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 to […]
The post Actively Exploited SharePoint Flaws Let Hackers Deploy Web Shells and Steal IIS Machine Keys appeared first on Cyber Security News.