Critical SharePoint Vulnerability Under Active Exploitation

A severe deserialization vulnerability, tracked as CVE-2026-50522, is being actively exploited in Microsoft SharePoint on-premises servers. This critical flaw enables attackers to execute remote code and steal machine keys, granting persistent access to affected systems. Security experts advise not only patching but also rotating credentials on any potentially compromised assets to mitigate risks.