Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
watchTowr reports active exploitation of SharePoint CVE-2026-50522 after a public PoC, with attackers stealing machine keys for persistence.
More info