Our S.O.S. line:
+49 89 262 025954
Our team of experts is ready to assist your organization in the event of a cyberattack.
details
What makes this vulnerability particularly noteworthy is that it is not merely a theoretical risk. CVE-2026-65660 was added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog on September 25, 2026, indicating that the vulnerability has been observed being exploited in the wild.
The vulnerability affects multiple SharePoint Server versions, including:
Successful exploitation can have a significant impact on the confidentiality, integrity, and availability of the affected system. The vulnerability can be exploited remotely, requires low privileges, and does not require user interaction.
Organizations should identify all affected SharePoint Server instances and verify their current build numbers. Systems running versions below the fixed builds should be updated as soon as possible.
Additional attention is warranted for internet-facing SharePoint deployments. Organizations should also review their monitoring and detection capabilities for suspicious activity involving vulnerable SharePoint servers.
CVE-2026-65660 is another reminder that keeping internet-facing infrastructure patched and continuously monitored remains a critical part of an effective vulnerability management strategy.
Do you want to be protected from attacks like the above? See our defensive services here: Managed Security – White Hat IT Security
This week’s CVE of The Week highlights a newly disclosed zero-day vulnerability in Check Point Software Technologies, a leading provider of cybersecurity solutions, after the vendor confirmed that the flaw was exploited in targeted attacks before a patch became available. [...]
