Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability (CVE-2025-53770)

ronjor · Jul 20, 2025

Release Date July 20, 2025

CISA is aware of active exploitation of a new remote code execution (RCE) vulnerability enabling unauthorized access to on-premise SharePoint servers. While the scope and impact continue to be assessed, the new Common Vulnerabilities and Exposures (CVE), CVE-2025-53770, is a variant of the existing vulnerability CVE-2025-49706 and poses a risk to organizations.
Click to expand...

This exploitation activity, publicly reported as “ToolShell,” provides unauthenticated access to systems and enables malicious actors to fully access SharePoint content, including file systems and internal configurations, and execute code over the network.
Click to expand...

anon · Jul 21, 2025

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available
https://www.bleepingcomputer.com/ne...-exploited-in-rce-attacks-no-patch-available/

DangitallRedux · Jul 26, 2025

This is apparently going to get out of hand:

https://www.axios.com/2025/07/22/microsoft-sharepoint-china-hack-targets

Log in or Sign up

Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability (CVE-2025-53770)

ronjor Global Moderator

anon Registered Member

DangitallRedux Registered Member

Log in or Sign up

Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability (CVE-2025-53770)

ronjor Global Moderator

anon Registered Member

DangitallRedux Registered Member

Useful Searches