CVE-2026-55040

CVE-2026-63520: SharePoint RCE Chain Probed in the Wild, PoC Public SharePoint RCE vulnerability PoC diagram showing CVE-2026-63520 exploitation

SharePoint RCE vulnerability PoC diagram showing CVE-2026-63520 exploitation

CVE-2026-63520: SharePoint RCE Chain Probed in the Wild, PoC Public

Do Son August 25, 2026

Security researchers have released full technical details and proof-of-concept exploit code for a critical SharePoint RCE vulnerability...

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter

Do Son August 19, 2026

TL;DR CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on August 18, 2026. Each entry...

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass

Do Son August 12, 2026

TL;DR Rapid7 has published a technical analysis and a working proof-of-concept for CVE-2026-55040. The flaw is a...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-82329CVSS 9.8
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026
CVE-2026-66384CVSS 5.3
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2023-49105CVSS 9.8
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file...
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2021-23758CVSS 8.1
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2019-1068CVSS 8.8
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions,...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-3246CVSS 5.1
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly...
CISA KEV📅 Added to KEV: Aug 26, 2026