sign in--:--:--UTC

CVE-2026-58644

exploited in the wild☆ pin

CVSS

9.8

Reports

7

First seen

Jul 15, 2026

Last seen

Jul 21, 2026

Affected product

Microsoft SharePoint Server 2016, 2019, Subscription Edition

Associated actors

Blind Eagle ×1 Qilin ×1 The Gentlemen ×1 UTA0533 ×1 World Leaks ×1

Recent reports

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

The Hacker NewsJul 21, 2026 Critical

Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day

The Hacker NewsJul 20, 2026 Critical

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog

The Hacker NewsJul 17, 2026 Critical

Multiple Vulnerabilities in Microsoft Products; CVE-2026-58644 Exploited in Wild

GovCERT.HKJul 17, 2026 High

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJul 16, 2026 Critical

Critical vulnerabilities in Microsoft SharePoint Server – CVE-2026-56164, CVE-2026-55040, CVE-2026-58644

Canadian Centre AlertsJul 15, 2026 Critical

CISA warns admins to patch actively exploited SharePoint flaws

Bleeping ComputerJul 15, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans