1. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE blog.viettelcybersecurity.com | 漏洞 | 2026-06-23 11:21 | 原文 ↗ | #rce | #deserialization | #sharepoint | #xml CVE-2026-33112:通过 XSD schema 网络导入绕过 SharePoint XmlValidator 校验,再经 PerformancePoint PPSAuthoringService 触发 ExcelDataSet 反序列化,实现低权限 RCE。