Microsoft SharePoint Server administrators are being urged to apply updates immediately after researchers observed attackers probing a two-vulnerability chain that could deliver unauthenticated remote code execution against internet-exposed on-premises SharePoint Server. The flaws, CVE-2026-55040 and CVE-2026-63520, affect SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016. The urgency increased after Defused reported […]
The post Microsoft SharePoint Flaws Chain to Unauthenticated Remote Code Execution appeared first on Cyber Security News.