security Source: The Hacker News
📅 23 September 2026 at 02:05 PM UTC

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Verified Primary Feed Ingestion
↗ Open Source Publication
🏷️ Identified Common Vulnerabilities & Exposures (CVE)
🛡️ Advisory: CVE-2026-65660 →
⚡ Executive Takeaways & Intelligence Summary
A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been
Publication Reference: https://thehackernews.com/2026/09/sharepoint-flaw-initially-listed-as.html
← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer
Hackers pull off $133 million French bank heist via service provider
BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
The Hacker News
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub