THREAT OPS › CVEs › CVE-2026-58644
CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
Vulnerability details
- Affected productsSharePoint
- KEV remediation due2026-07-19
Exploiting threat actors
- Earth LuscaG1006
Related reporting
- July 2026 CVE Landscaperecordedfuture
- CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilitiestenable
- [CISA KEV] CVE-2026-58644 — Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerabilitycisa_kev
- Patch Tuesday - July 2026rapid7
- 2026-009: Critical Vulnerabilities in Microsoft SharePointcert_eu
- Microsoft and Adobe Patch Tuesday, July 2026 Security Update Reviewqualys
- Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilitiestalos
- Microsoft security advisory – July 2026 monthly rollup (AV26-698) – Update 3cccs_ca
- The July 2026 Security Update Reviewzdi_blog
- CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wildrapid7