---
id: 7290
title: "Phân tích CVE-2026-20963"
cve: CVE-2026-20963
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/phan-tich/"
published_at: "2026-04-24T08:44:00Z"
tags: ["rce", "deserialization", "sharepoint", "patch-analysis", "safecontrols", "cve-2026-20963"]
phying_url: "https://phying.com/item/7290"
lang: en
---

# Phân tích CVE-2026-20963

## Summary

A diff-based analysis of SharePoint CVE-2026-20963 shows the KB5002825 patch hardened Register Directive parsing, which attackers could abuse to bypass SafeControls checks and reach RCE.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2026-20963
- **Published:** 2026-04-24T08:44:00Z
- **Original:** https://blog.viettelcybersecurity.com/phan-tich/
- **Phying News:** https://phying.com/item/7290