Active Exploitation of CVE-2026-55040 in Microsoft SharePoint Following Public PoC Release
Critical authentication bypass vulnerability patched in July 2026 Patch Tuesday; attackers leveraging public proof-of-concept code
Key Takeaways
- CVE-2026-55040, a critical authentication bypass vulnerability in Microsoft SharePoint, is being actively exploited.
- Exploitation follows the public release of proof-of-concept code.
- The vulnerability has a CVSS score of 9.1, reflecting critical severity.
- Microsoft patched the flaw during July 2026 Patch Tuesday.
Related Security News
Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.
