CISA Issues Urgent Warnings for Critical Vulnerabilities in SimpleHelp, SharePoint, and Other Enterprise Platforms

The Cybersecurity and Infrastructure Security Agency (CISA) has escalated two severe vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a catastrophic authentication bypass in SimpleHelp remote support software (CVE-2026-48558) with a CVSS score of 10.0, and a dangerous data deserialization flaw in Microsoft Office SharePoint (CVE-2026-45659) actively exploited by hackers. Additionally, critical zero-day exploits are affecting Adobe ColdFusion and Progress ADC products, demanding immediate patching and mitigation actions from network administrators.