THREATOPS

THREAT OPS › CVEs › CVE-2026-45659

CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CISA KEVExploited: confirmedMicrosoft

Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.

Vulnerability details

Affected productsSharePoint Server
KEV remediation due2026-07-04

Related reporting

CISA Adds One Known Exploited Vulnerability to Catalogcisa_advisories
[CISA KEV] CVE-2026-45659 — Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerabilitycisa_kev
AL26-015 - Critical vulnerability impacting Microsoft SharePoint Server – CVE-2026-45659cccs_ca