轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202605-00000015

[內容說明]
Microsoft SharePoint Server 是一款企業級協作平台，提供文件管理與團隊協作等功能，是企業資訊整合的核心平台。近期微軟發布重大資安公告(CVE-2026-45659，CVSS：8.8)，此漏洞為不受信任資料反序列化漏洞，允許經身分驗證的攻擊者可透過網路執行程式碼。

[影響平台]
Microsoft SharePoint Enterprise Server 2016 16.0.5552.1002(不含)之前版本、 Microsoft SharePoint Server 2019 16.0.10417.20128(不含)之前版本、 Microsoft SharePoint Server Subscription Edition 16.0.19725.20280(不含)之前版本

[建議措施]
根據官方網站釋出的解決方式進行修補：
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659

Forwarded from Taiwan Computer Network Crisis Management and Coordination Center: Cybersecurity Alert TWCERTCC-200-202605-00000015

[Content Description]
Microsoft SharePoint Server is an enterprise-level collaboration platform that provides file management and team collaboration functions, serving as a core platform for enterprise information integration. Recently, Microsoft released a major cybersecurity bulletin (CVE-2026-45659, CVSS: 8.8). This vulnerability is an untrusted data deserialization vulnerability, allowing an authenticated attacker to execute code over a network.

[Affected Platforms]
Microsoft SharePoint Enterprise Server 2016 versions prior to 16.0.5552.1002, Microsoft SharePoint Server 2019 versions prior to 16.0.10417.20128, and Microsoft SharePoint Server Subscription Edition versions prior to 16.0.19725.20280.

[Recommended Action]
Patch according to the solutions released on the official website:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659