Critical severity9.8CISA KEVNVD Advisory· Published Jul 14, 2026· Updated Jul 17, 2026
CVE-2026-58644
CVE-2026-58644
Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Affected products
4cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*+ 2 more
- cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*range: <16.0.19725.20434
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644nvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
5- SharePoint Vulnerability Exploited Shortly After PoC ReleaseSecurityWeek · Aug 12, 2026
- Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHelp Net Security · Jul 26, 2026
- Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)Help Net Security · Jul 22, 2026
- Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of AttacksSecurityWeek · Jul 22, 2026
- Microsoft SharePoint RCE Zero-Day Added to CISA KEV Under Active ExploitationVypr Intelligence · Jul 16, 2026