Security researchers have discovered a critical vulnerability (CVE-2026-55040, CVSS 9.1) in Microsoft SharePoint that enables unauthenticated remote code execution, allowing attackers to impersonate any user including administrators without valid credentials. Notably, AI agents played a significant role in identifying this exploit chain. The vulnerability affects SharePoint Server Subscription Edi
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft's
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
1 min read
1 min read
1 min read