SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

🗓️ 02 Jul 2026 05:46:00Reported by The Hacker NewsType

CISA adds CVE-2026-45659 to KEV after active exploitation; authenticated attackers with Site Member rights can execute remote code.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for CVE-2026-45659	27 May 202614:12	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	1 Jun 202607:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	7 Jul 202623:52	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	9 Jun 202611:16	–	githubexploit
ATTACKERKB	CVE-2026-45659	22 May 202622:04	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	3 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-45659	21 May 202621:00	–	circl
CISA KEV Catalog	Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability	1 Jul 202600:00	–	cisa_kev
CNNVD	Microsoft Office SharePoint 代码问题漏洞	22 May 202600:00	–	cnnvd
CNVD	Microsoft Office SharePoint code-related vulnerabilities	26 May 202600:00	–	cnvd

12 Aug 2026 13:46Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.8

EPSS0.76075

SSVC