Threat actors are actively exploiting CVE-2026-55040, a critical authentication bypass vulnerability in Microsoft SharePoint with a CVSS score of 9.1, following the public release of proof-of-concept code. Microsoft patched this security feature bypass flaw in its July 2026 Patch Tuesday updates, but organizations that haven't applied the patch remain at risk.
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday updates. "The authentication
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
