SharePoint Under Siege: Five CVEs Exploited in Three Months — What It Means for Enterprise Security
CISA added five SharePoint Server CVEs to the KEV catalog between April and July 2026. Attackers exploit RCE flaws and steal IIS machine keys for persistent access. Analysis and response guidance.