INCIDENT EVIDENCE GRAPH

CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

2026-07-21T20:06:55Z

• Victim: Microsoft SharePoint
• Actor: Threat actors
• Exploit: CVE-2026-50522
• Method: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Primary evidence

1. Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
2. CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
3. Critical SharePoint RCE flaw exploited to steal machine keys

中文