sign in--:--:--UTC

CVE-2026-63520

exploited in the wild☆ pin

CVSS

8.1

Reports

4

First seen

Aug 11, 2026

Last seen

Aug 27, 2026

Affected product

Microsoft SharePoint Server Subscription Edition, 2019, 2016; Project Server 2013 SP1; Office Web Apps 2013 SP1

Associated actors

AndroidKitKat ×1 Iranian threat actors ×1 Lazarus ×1 ShinyHunters ×1 TA4922 ×1

Recent reports

ThreatsDay: Weekly threat digest – 296K IoT botnet, water systems targeted, SharePoint RCE, 27+ threats

The Hacker NewsAug 27, 2026 Critical

Hackers target Microsoft SharePoint RCE chain with PoC exploit

Bleeping ComputerAug 26, 2026 Critical

Microsoft Patches 398 Flaws Including Windows Driver Zero-Day Under Active Attack

The Hacker NewsAug 11, 2026 Critical

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

The Hacker NewsAug 11, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans