Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

wiz.io | vulnerability | #rce | #microsoft | #sharepoint | #vulnerability | #cve-2025-53770 | #cve-2025-53771

Summary

Wiz breaks down the exploited SharePoint ToolShell chain: CVE-2025-53770 (CVSS 9.8 RCE) and CVE-2025-53771 (spoofing) bypass July patches, hit on-prem servers only and demand emergency mitigation.
Published
Collected

original ↗

Related coverage

  1. Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE (blog.viettelcybersecurity.com)
  2. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  3. What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond (hackerone.com)
  4. CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login (blog.viettelcybersecurity.com)
  5. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  6. CVE-2026-20963 Analysis (blog.viettelcybersecurity.com)

back