THREATOPS

THREAT OPS › Threat News › CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

lowrapid7Published 2026-07-17

<h2 style="direction: ltr;">Overview</h2><p style="direction: ltr;"><span style="font-size: undefined;">On July 14, 2026, Microsoft </span><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"><span style="font-size: undefined;">published</span></a><span style="font-size: undefined;"> a security advisory addressing </span><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-

MITRE ATT&CK techniques

SharepointT1213.002
IP AddressesT1590.005
VulnerabilitiesT1588.006

Indicators of compromise

CVE-2026-58644cve
CVE-2026-50522cve

Original source: https://www.rapid7.com/blog/post/etr-cve-2026-58644-microsoft-sharepoint-server-unauthenticated-remote-code-execution-vulnerability-exploited-in-the-wild