Hackers target Microsoft SharePoint RCE chain with PoC exploit

Attackers are chaining two unpatched Microsoft SharePoint vulnerabilities — an authentication bypass and a remote code execution flaw in Business Connectivity Services — to fully compromise unpatched servers. The public availability of proof-of-concept exploit code dramatically lowers the barrier for threat actors, accelerating the window between disclosure and mass exploitation. Organizations running unpatched SharePoint instances face severe risk of complete server compromise, data theft, and lateral movement within their networks. This incident underscores that delayed patching of internet-facing, business-critical platforms can be catastrophic once a working PoC enters the wild.