CVE-2026-65660

LLM-synthesized narrative grounded in this CVE's description and references.

• Microsoft/Office SharePointllm-fuzzy
• Microsoft/Sharepoint Serverllm-create4 versions

  (expand)+ 3 more

  • (no CPE)
  • cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*range: <16.0.19725.20522
  • cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660nvdPatchVendor Advisory
• blog.previdian.com/cve-2026-65660-previdian-observes-two-stage-sharepoint-exploitation-attempts/nvdThird Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
  Risky Business · Oct 14, 2026
• Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
  SecurityWeek · Sep 30, 2026
• CISA Warns of Microsoft SharePoint Code Injection Vulnerability Exploited in Attacks
  Cyber Security News · Sep 28, 2026
• Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
  SecurityWeek · Sep 28, 2026
• Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug
  SecurityWeek · Sep 28, 2026
• Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
  SecurityWeek · Sep 27, 2026
• SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
  The Hacker News · Sep 26, 2026
• Microsoft: CVE-2026-65660 Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Sep 25, 2026
• Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges
  Cyber Security News · Sep 22, 2026
• SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
  The Hacker News · Sep 22, 2026
• Patch Tuesday - August 2026
  Rapid7 Blog · Aug 11, 2026
• Microsoft's August 2026 Patch Tuesday addresses 398 CVEs (CVE-2026-68820)
  Tenable Blog · Aug 11, 2026
• Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days
  Cyber Security News · Aug 11, 2026
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  CISA Alerts