CISA Adds Exploited Microsoft SharePoint RCE Zero-Day (CVE-2026-58644) to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-58644, a critical deserialization of untrusted data vulnerability in Microsoft SharePoint Server, to its Known Exploited Vulnerabilities (KEV) catalog. This flaw, which allows an unauthorized attacker to execute arbitrary code remotely, has been actively exploited in the wild. Federal Civilian Executive Branch (FCEB) agencies are mandated to apply patches by July 19, 2026, highlighting the urgency of addressing this high-severity security risk.

Context

CVE-2026-58644 is a critical vulnerability identified in Microsoft SharePoint Server that enables remote code execution through the deserialization of untrusted data. CISA's KEV catalog serves as a resource for organizations to prioritize their cybersecurity efforts based on real-world threats. The urgency for federal agencies to patch this vulnerability reflects the heightened focus on cybersecurity in the wake of increasing cyberattacks.

Why it matters

The addition of CVE-2026-58644 to CISA's Known Exploited Vulnerabilities catalog underscores the increasing threat posed by cybersecurity vulnerabilities in widely used software. This specific flaw in Microsoft SharePoint could allow unauthorized access and control over affected systems, potentially leading to significant data breaches. Timely patching is critical to safeguard sensitive information and maintain operational integrity across federal agencies and beyond.

Implications

Failure to address this vulnerability could expose organizations to significant risks, including data theft and operational disruptions. Federal agencies are particularly at risk due to their mandated compliance with patching requirements. Additionally, private sector organizations using SharePoint may face increased scrutiny and potential attacks if they do not take proactive measures to secure their systems.

What to watch

Organizations using Microsoft SharePoint should monitor for updates and patches related to CVE-2026-58644, especially as the July 19, 2026 deadline approaches for federal agencies. Cybersecurity firms may release additional guidance or tools to mitigate the risks associated with this vulnerability. Observing how quickly organizations implement the necessary patches will be crucial in assessing the overall response to this threat.