[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fodCLRa0Nnx-_PRHcJYzvz9BOirQQROMoJNbHlpj1ozM":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"2db0e330-679a-4f4c-9a62-354eb4c42167","CISA: Microsoft SharePoint RCE flaw now actively exploited","cisa-microsoft-sharepoint-rce-flaw-now-actively-exploited-7baac3","CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May. [...]","CISA has issued a warning that a critical remote code execution vulnerability in Microsoft SharePoint, tracked as CVE-2026-45659, is now being actively exploited by attackers. The flaw allows authenticated attackers with minimal privileges to execute arbitrary code on unpatched servers with low complexity attacks. CISA has added it to its Known Exploited Vulnerabilities Catalog and mandated federal agencies to patch it by Saturday.","CISA warns of active exploitation of a critical Microsoft SharePoint RCE vulnerability.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-microsoft-sharepoint-rce-flaw-now-actively-exploited\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F03\u002F19\u002FMicrosoft-Sharepoint.jpg","2026-07-02T10:52:43+00:00","2026-07-02T12:00:20.158884+00:00",9,[17,20,23],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"SharePoint","product",{"name":24,"type":25},"remote code execution","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":46,"value":47,"context":48},"cve","CVE-2026-45659","Microsoft SharePoint remote code execution vulnerability",[18,21],{"controls":51,"vendors":137},[52,80,109],{"slug":53,"name":54,"problem":55,"products":56},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[57,64,72],{"vendor_slug":58,"vendor_name":18,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":81,"name":82,"problem":83,"products":84},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":110,"name":111,"problem":112,"products":113},"patch-management","Automated patch management","Known holes get closed in days, not months.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":110,"product_name":134,"url":135,"description":136},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[138],{"slug":58,"name":18,"logo_path":59,"roles":139},[140],"affected",{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":155},"critical-sharepoint-rce-flaw-actively-exploited-patch-immediately","Critical SharePoint RCE Flaw Actively Exploited — Patch Immediately","A critical remote code execution vulnerability in Microsoft SharePoint (CVE-2026-45659) is being actively exploited in the wild, allowing authenticated attackers with low privileges to execute arbitrary code on unpatched servers. The low complexity of the attack significantly lowers the barrier for threat actors, meaning even moderately skilled attackers can weaponize this flaw quickly. CISA's addition to the Known Exploited Vulnerabilities (KEV) Catalog underscores the urgency, as federal agencies have been given a hard deadline to patch. This incident highlights how delayed patching of internet-facing collaboration platforms can expose organizations to full system compromise. The broader lesson is that critical patches for widely-used enterprise software must be treated as emergency responses, not routine maintenance cycles.",[146,147,148,149,150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-40: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST AC-6: Least Privilege","NIST RA-5: Vulnerability Monitoring and Scanning","CISA BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities",{}]