CyberzSOC

Attackers leveraging these vulnerabilities may be able to execute arbitrary code remotely without authentication, etc. According to Microsoft, among the vulnerabilities, the following vulnerabilities have been confirmed to be exploited in the wild. Please refer to the latest information provided by Microsoft and implement the measures described in "II. Solution." Microsoft SharePoint Server Elevation of Privilege Vulnerability Active Directory Federation Services Elevation of Privilege Vulnerability Microsoft has updated its advisory and stated that the remote code execution vulnerability in SharePoint (CVE-2026-58644), which was addressed in this month's security updates, has been exploited in the wild. Microsoft SharePoint Remote Code Execution Vulnerability In addition, another remote code execution vulnerability (CVE-2026-50522)has been added to CISA's Known Exploited Vulnerabilities (KEV) Catalog.Information believed to include a proof-of-concept (PoC) exploit for this vulnerability has been published by a security researcher. Furthermore,watchTowr has reported observing attacks using the PoC exploit against its honeypots and published information indicating that machine keys were stolen from vulnerable SharePoint Server.