sign in--:--:--UTC

CVE-2026-20963

exploited in the wild☆ pin

CVSS

9.8

Reports

3

First seen

Mar 24, 2026

Last seen

Apr 13, 2026

Affected product

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Associated actors

Interlock Ransomware Group ×1

Recent reports

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities, Interlock Ransomware Exploits Cisco FMC Zero-Day

Recorded Future InsiktApr 13, 2026 Critical

Critical Vulnerability in SharePoint Exploited (CVE-2026-20963)

CERT-EU AdvisoriesMar 25, 2026 Critical

Microsoft Office SharePoint High-Risk Deserialization Vulnerability (CVE-2026-20963)

NICS TaiwanMar 24, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans