As cited
Copy frozen at (site build).
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-45659, a Microsoft SharePoint Server deserialization vulnerability, to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. The addition underscores CISA's Binding Operational Directive 26-04, which requires federal agencies to prioritize patching high-risk vulnerabilities affecting publicly exposed assets, while CISA recommends all organizations adopt similar risk-based vulnerability management practices.
Why it matters: If you operate SharePoint Server on a publicly exposed asset, prioritize patching CVE-2026-45659 immediately as it enables complete system compromise and is actively exploited.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-45659, a Microsoft SharePoint Server deserialization vulnerability, to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. The addition underscores CISA's Binding Operational Directive 26-04, which requires federal agencies to prioritize patching high-risk vulnerabilities affecting publicly exposed assets, while CISA recommends all organizations adopt similar risk-based vulnerability management practices.
Why it matters: If you operate SharePoint Server on a publicly exposed asset, prioritize patching CVE-2026-45659 immediately as it enables complete system compromise and is actively exploited.
- Source published
- First seen by Cybersecurity Tracker