CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520

CVE-2026-63520 is an RCE in Microsoft SharePoint via an unsafe ".NET type instantiation" in Business Connectivity Services. Affected products include SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016, Project Server 2013 SP1, and Office Web Apps 2013 SP1. The ...

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 CVSS 9.1, affects SharePoint Server Subscription...

CVE-2026-63520

creationtimestamp| type| source ---|---|--- 2026-08-11 14:10:50+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3msss6utij425 2026-08-11 17:32:13+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mst5gyl7bk2z 2026-08-11 18:00:03+00:00| published-proof-of-concept|...