| Date | Source | Article |
|---|---|---|
| 2026-07-29 | The Hacker News | Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass CVE-2026-16232 |
| 2026-07-27 | Check Point Research | 27th July – Threat Intelligence Report CVE-2026-16232 |
| 2026-07-23 | The Hacker News | Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access CVE-2026-16232 |
| 2026-07-21 | BleepingComputer | Critical SharePoint RCE flaw exploited to steal machine keys CVE-2026-50522 |
| 2026-07-21 | The Hacker News | Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC CVE-2026-50522 |
| 2026-07-15 | Trend Micro ZDI | ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-50522 |
| 2026-07-15 | Trend Micro ZDI | ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability CVE-2026-50522 |
Articles from the monitored vendor research blogs and security news feeds that reference a CVE cited in this publication, or name the campaign it covers. Coverage begins when feed monitoring started; earlier articles are not indexed.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2026-50522 | 9.8 Critical | Microsoft SharePoint Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a net… |
| CVE-2026-16232 | 9.1 Critical | Check Point SmartConsole Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an applicat… |
Extracted from the publication text. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.