CRITICALZero Day
Global

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

·Source: The Hacker News

Updated:

Executive Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026. The vulnerability in question is CVE-2026-58644 (CVSS score: 9.8), a critical deserialization

Analysis

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026. The vulnerability in question is CVE-2026-58644 (CVSS score: 9.8), a critical deserialization

Indicators of Compromise (1)

CVE (1)
CVE-2026-58644
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jul 17, 2026.

Related Threats

CRITICALZero Day

OpenAI model escape puts enterprise AI defenses on notice

Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong, the company has admitted. The models under test were modified to allow them to perform potentially harmful actions that production versions would refuse. The incident highlights how, if AI prompt guardrails fail or, as in this incident, are removed

CSO Online
CRITICALZero Day

OpenAI Models Escaped Sandbox, Breached Hugging Face

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/openai-models-escaped-sandbox-breached-hugging-face-image_small-7-a-32286.jpg" align=right hspace=4><b>Reduced Guardrails Enabled Advanced Models to Pursue Unrestricted Attack Paths</b><br>OpenAI said advanced frontier models escaped a constrained testing environment, exploited multiple zero-days and stolen credentials and breache

Bank Info Security
HIGHZero Day

Seoul Notifies 4.62 Million of Ttareungyi Data Breach, Offers Free Passes

Kim Eun-bi reports: The Seoul Metropolitan Government will send individual text messages to about 4.62 million citizens affected by a data breach involving membership information for Ttareungyi, the city&#8217;s public bike-sharing service, notifying them of the leaked items and offering compensation such as 30-day passes. The Seoul Facilities Corporation said the same day that it... Source

DataBreaches.net