---
id: 7292
title: "[CVE-2025-49704] ToolShell - Chuỗi lỗ hổng SharePoint nghiêm trọng đang bị khai thác trong thực tế"
cve: CVE-2025-49704
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/toolshell-chuoi-lo-hong-sharepoint-nghiem-trong-dang-bi-khai-thac-trong-thuc-te/"
published_at: "2025-07-24T10:37:51Z"
tags: ["active-exploitation", "threat-intelligence", "sharepoint", "cve-2025-53770", "toolshell", "iocs"]
phying_url: "https://phying.com/item/7292"
lang: en
---

# [CVE-2025-49704] ToolShell - Chuỗi lỗ hổng SharePoint nghiêm trọng đang bị khai thác trong thực tế

## Summary

Viettel Threat Intelligence analyzes the actively exploited ToolShell chain of four SharePoint CVEs, with detection guidance for unpatched servers and post-exploitation tracing advice.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2025-49704
- **Published:** 2025-07-24T10:37:51Z
- **Original:** https://blog.viettelcybersecurity.com/toolshell-chuoi-lo-hong-sharepoint-nghiem-trong-dang-bi-khai-thac-trong-thuc-te/
- **Phying News:** https://phying.com/item/7292