CISA Mandates Remediation for Critical Check Point and Microsoft SharePoint Vulnerabilities by July 25

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities affecting Check Point Security Management (CVE-2026-16232) and Microsoft SharePoint (CVE-2026-50522) to its Known Exploited Vulnerabilities (KEV) catalog. Federal civilian agencies are required to remediate these flaws by July 25, 2026. CVE-2026-16232 is an authentication bypass in Check Point's SmartConsole allowing full admin privileges, while CVE-2026-50522 is a deserialization vulnerability in Microsoft SharePoint that could lead to remote code execution. Both vulnerabilities are under active exploitation, underscoring the urgency for all organizations to apply patches and mitigations.