Exploited vulnerabilitiesBriefConfirmed by two or more outlets
SharePoint missing authentication (CVE-2026-56164, with CVE-2026-32201 and -45659)
July 2026 Patch Tuesday. KEV: 14 Jul 2026 with a 3-day deadline under BOD 26-04.
- Disclosed
What happened
- Affected: SharePoint 2016, 2019 and Subscription Edition. Not SharePoint Online.
Live scores
Live scores
CVE-2026-32201- EPSS
- 0.434
likely to be attacked soon - VEDAS
- 0.608
some exploit evidence - On CISA KEV
- Yes, since 2026-04-14
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2026-45659- EPSS
- 0.802
very likely to be attacked soon - VEDAS
- 0.808
some exploit evidence - On CISA KEV
- Yes, since 2026-07-01
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2026-56164- EPSS
- 0.010
some chance of attack soon - VEDAS
- 0.513
some exploit evidence - On CISA KEV
- Yes, since 2026-07-14
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://orca.security/resources/blog/microsoft-july-2026-patch-tuesday-sharepoint-zero-day/
- https://www.cynet.com/blog/cisa-confirms-active-exploitation-of-three-on-premises-microsoft-sharepoint-cves/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.