Vulnerability intelligence
CVE-2026-58644
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
16%
Riskier than 97% of all CVEs
Exploitation
Confirmed in the wild
KEV since 2026-07-16
Remediation
Patch available
Federal deadline 2026-07-19
11 articles across 6 outlets · first covered Jul 15, 2026 · latest Jul 22, 2026
Coverage timeline
-
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attackswww.securityweek.com · Jul 22, 2026
-
CISA urges patch of FortiSandbox, SharePoint flaws amid exploitssecurityaffairs.com · Jul 18, 2026
-
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privilegessecurityonline.info · Jul 18, 2026
-
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Userssecurityonline.info · Jul 17, 2026
-
Critical SharePoint Flaw Exploited, CISA Urges Immediate Patchingwww.securityweek.com · Jul 17, 2026
-
CISA Adds SharePoint Zero Day Exploit CVE-2026-58644 to KEV Catalogthehackernews.com · Jul 17, 2026
-
Red Hat OpenShift AI flaw lets attackers read local filessecurityonline.info · Jul 17, 2026
-
CISA orders urgent patches for SharePoint, FortiSandbox flawssecurityonline.info · Jul 17, 2026
-
CISA Adds Critical SharePoint Flaw CVE-2026-58644 to KEVwww.cisa.gov · Jul 16, 2026
-
CISA Adds Critical SharePoint Flaw CVE-2026-58644 to KEVcisa.gov · Jul 16, 2026
-
CISA urges swift patching of SharePoint after zero day exploitswww.securityweek.com · Jul 15, 2026