Critical severity9.8CISA KEVNVD Advisory· Published Jul 14, 2026· Updated Jul 23, 2026
CVE-2026-50522
CVE-2026-50522
Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Affected products
4cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*+ 3 more
- cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*range: <16.0.19725.20434
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522nvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
9- SharePoint Vulnerability Exploited Shortly After PoC ReleaseSecurityWeek · Aug 12, 2026
- 200 accounts compromised in Swiss government’s Microsoft SharePoint breachHelp Net Security · Aug 7, 2026
- August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?Help Net Security · Aug 7, 2026
- 27th July – Threat Intelligence ReportCheck Point Research · Jul 27, 2026
- Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHelp Net Security · Jul 26, 2026
- Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)Help Net Security · Jul 22, 2026
- Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of AttacksSecurityWeek · Jul 22, 2026
- Microsoft CVE-2026-50522 Zero-Day Added to CISA KEV Under Active ExploitationVypr Intelligence · Jul 22, 2026
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts