SharePoint Server 2019 — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Active Exploitation of Microsoft AD FS Vulnerability CVE-2026-56155 Detected

  Microsoft has confirmed the active exploitation of CVE-2026-56155, an elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows authenticated local attackers with low…

  6 articles · Updated July 15, 2026
• Critical SharePoint RCE Vulnerability Exploited for Key Theft

  A critical remote code execution vulnerability (CVE-2026-50522) in Microsoft SharePoint is being actively exploited. Attackers are targeting on-premise SharePoint deployments to extract IIS machine keys, allowing for…

  3 articles · Updated July 22, 2026
• Ransomware Exploits Critical SharePoint Vulnerability CVE-2026-45659

  CISA has confirmed that ransomware groups are actively exploiting a critical vulnerability (CVE-2026-45659) in Microsoft SharePoint Server, which allows remote code execution. Over 200 unpatched SharePoint servers are…

  2 articles · Updated August 11, 2026
• Security Updates for SharePoint Servers Address CVE-2025-49706

  Microsoft released security updates for SharePoint Enterprise Server 2016 and SharePoint Server 2019 to address CVE-2025-49706. The updates were published on July 8, 2025, and are critical for users running these…

  2 articles · Updated February 28, 2026

Recent Intelligence Reports

• Ransomware attacks unpatched SharePoint instances — Heise.De · August 11, 2026
• Microsoft SharePoint Vulnerabilities Actively Exploited for RCE, Web Shells, and IIS Key Theft — Cybersecuritynews · July 20, 2026
• CC-4814 — Digital.Nhs.Uk · July 15, 2026
• Description of the security update for SharePoint Server 2019: July 8, 2025 (KB5002741) — Support.Microsoft · February 27, 2026

Related Entities