Forwarded from Taiwan Computer Network Crisis Management and Coordination Center: Cybersecurity Alert TWCERTCC-200-202605-00000015
[Content Description]
Microsoft SharePoint Server is an enterprise-level collaboration platform that provides file management and team collaboration functions, serving as a core platform for enterprise information integration. Recently, Microsoft released a major cybersecurity bulletin (CVE-2026-45659, CVSS: 8.8). This vulnerability is an untrusted data deserialization vulnerability, allowing an authenticated attacker to execute code over a network.
[Affected Platforms]
Microsoft SharePoint Enterprise Server 2016 versions prior to 16.0.5552.1002, Microsoft SharePoint Server 2019 versions prior to 16.0.10417.20128, and Microsoft SharePoint Server Subscription Edition versions prior to 16.0.19725.20280.
[Recommended Action]
Patch according to the solutions released on the official website:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659