THREAT OPS › CVEs › CVE-2026-50522
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
Vulnerability details
- Affected productsSharePoint
- KEV remediation due2026-07-25
Exploiting threat actors
- Earth LuscaG1006
Related reporting
- July 2026 CVE Landscaperecordedfuture
- CISA Adds Two Known Exploited Vulnerabilities to Catalogcisa_advisories
- Critical SharePoint Bug Under Attackduo_decipher
- [CISA KEV] CVE-2026-50522 — Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability cisa_kev
- 27th July – Threat Intelligence Reportcheckpoint_research
- Patch Tuesday - July 2026rapid7
- 2026-009: Critical Vulnerabilities in Microsoft SharePointcert_eu
- Microsoft and Adobe Patch Tuesday, July 2026 Security Update Reviewqualys
- Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilitiestalos
- ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerabilityzdi_published
- ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerabilityzdi_published
- Microsoft security advisory – July 2026 monthly rollup (AV26-698) – Update 3cccs_ca
- The July 2026 Security Update Reviewzdi_blog
- CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wildrapid7