{"uuid": "593a91fd-6fac-4163-8c17-149cada0ac11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2135", "content": "\ud83d\udd34 Fresh SharePoint Vulnerability Exploited Soon After Disclosure\n\nThreat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns.\n\nTracked as CVE-2026-58644 (CVSS score of 9.8) and fixed as part of Microsoft\u2019s July 2026 Patch Tuesday updates, the flaw is described as a deserialization of untrusted data issue.\n\n\u201cIn a network-based attack, an attacker authenticated as at least a Site Owner could write arbitrary code to inject and execute code remotely on the SharePoint Server,\u201d Microsoft explains.", "creation_timestamp": "2026-08-23T00:00:44.591175Z"}