Critical Security Vulnerabilities Exploited in Microsoft SharePoint

Hackers have begun exploiting two critical security vulnerabilities in Microsoft SharePoint. The vulnerabilities are identified as CVE-2026-55040 and CVE-2026-63520. According to the security firm Defused, more than 8,700 SharePoint servers worldwide are at risk. Attackers can leverage these vulnerabilities to execute their own code on unpatched servers, potentially leading to malware installation. The initial attacks have focused on honeypots specifically set up as bait for cybercriminals.

These isolated systems are designed to identify attackers and analyze their methods. Bleeping Computer reports that attacks on these honeypots have already been observed, indicating an impending shift of attacks towards real systems. To protect against these attacks, administrators are advised to promptly install the latest security updates from Microsoft. Microsoft has already released patches that close the vulnerabilities. Installing these updates is crucial to ensure the integrity of systems and prevent potential attacks.

The vulnerabilities have been classified as critical, meaning they pose a high risk to the affected systems. The flaws allow attackers to access systems without authentication. This could lead to a complete compromise of the servers, which can have severe consequences for businesses. The actual number of affected systems could be even higher, as many companies may not have the latest security updates. The widespread use of Microsoft SharePoint in enterprises globally makes these vulnerabilities particularly concerning.

Software is often used for document management and team collaboration. The vulnerabilities were discovered last week, and the response from the IT security community was immediate. Experts warn of the potential consequences of an attack, which could result not only in data loss but also significant financial damage. Companies are urged to review their systems promptly and ensure that all security updates are installed. The attacks on honeypots are a typical tactic used by cybercriminals to test vulnerabilities before targeting more valuable assets.

The fact that these attacks are already occurring indicates that the threat is real and present. IT administrators should therefore remain vigilant and regularly review their security protocols. Microsoft has announced that security updates for all affected versions of SharePoint will be available by the end of September 2026. Companies should ensure they have the latest information on security updates and apply them in a timely manner. Installing the patches is the first step towards securing systems against these critical threats.

The vulnerabilities CVE-2026-55040 and CVE-2026-63520 are part of a series of flaws discovered in various software products in recent months. The IT security industry is closely monitoring these developments to assist companies in defending against cyberattacks. A swift response to such security incidents is crucial for protecting sensitive data. The vulnerability CVE-2026-55040 allows attackers to execute arbitrary code, while CVE-2026-63520 offers similar functionality. Both vulnerabilities require urgent attention from IT administrators to ensure the security of systems.