CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

🗓️ 17 Jul 2026 06:42:00Reported by The Hacker NewsType

CISA adds CVE-2026-58644 to KEV; SharePoint deserialization RCE with patches released.

Reporter	Title	Published	Views	Family All 25
GithubExploit	sharepoint-2026-poc	26 Jul 202616:27	–	githubexploit
Information Security Automation	July Microsoft Patch Tuesday	26 Jul 202620:00	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	17 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-58644	14 Jul 202619:00	–	circl
CISA KEV Catalog	Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	16 Jul 202600:00	–	cisa_kev
CVE	CVE-2026-58644	14 Jul 202617:05	–	cve
Cvelist	CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability	14 Jul 202617:05	–	cvelist
EUVD	EUVD-2026-43779	14 Jul 202618:32	–	euvd
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: June 9, 2026 (KB5002873)	14 Jul 202614:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: June 9, 2026 (KB5002874)	14 Jul 202614:00	–	mskb