CISA says a SharePoint flaw patched in May is now being used in ransomware — 200 servers are still unpatched
2026-08-14Security
CVE-2026-45659 was patched in May, flagged as exploited on 1 July with a three-day federal deadline, and marked as used in ransomware on 11 August. Of 8,500 SharePoint servers exposed online, 200-plus remain vulnerable.