CVE-2026-45659: Microsoft SharePoint Server Deserialization of Untrusted

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability. Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.

• CISA KEV-listed (remediation due 2026-07-04)
• used in ransomware campaigns
• EPSS 9.9% (95.3% percentile)
• CVSS 8.8 high

Related briefings

• Four SharePoint flaws joined CISA's exploited list in July 2026-08-03
• CISA flags a new SharePoint flaw as actively exploited 2026-07-17
• Microsoft fixes 622 flaws in July, two already under active attack 2026-07-14
• CISA warns of active attacks on a Microsoft SharePoint flaw 2026-07-02

Browse the CVE database

Read the full analysis on IntelFusions