AIThe Hacker Newsabout 2 hours ago
SharePoint Exploit Chain Reaches Unauthenticated RCE
1 min read
Researchers at Rapid7 found an AI-assisted exploit chain in Microsoft SharePoint reaching unauthenticated remote code execution. The bypass, CVE-2026-55040 (CVSS 9.1), lets attackers impersonate any user, including admins, on three on-premises editions. Chained with CVE-2026-63520 (CVSS 8.1), it runs code as the service account.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
