CISA tells federal orgs to patch Microsoft Sharepoint vuln by the 4th of July

CISA says Sharepoint bug CVE-2026-45659 is being exploited in the wild.

Updated Jul 3, 2026 2:08 PM / Published Jul 3, 2026 11:40 AM 2 min read

CISA tells federal orgs to patch Microsoft Sharepoint vuln by the 4th of July — Photo by Daniel Olah / Unsplash

A remote code execution flaw in Microsoft's SharePoint servers is being exploited in the wild.

US cybersecurity agency CISA has told federal organisations they must patch by Saturday, July 4. Happy Independence day.

The RCE vulnerability has a CVSS score of 8.8 and was added to the Known Exploited Vulnerability catalogue on Thursday, July 1.

Microsoft released a patch for CVE-2026-45659, which is described as a "deserialization of untrusted data in Microsoft Office SharePoint" on May 21. Per Redmond's advisory, an attacker can achieve remote code execution via network access. The vulnerability has low attack complexity, low privileges required, and needs no user interaction.

This content is for members only

Already have an account? Sign in

Add The Stack on Google

Kiera Fields

Kiera Fields is head of special projects at The Stack and was previously at Business Insider. She writes about leadership, tech and business, covering everything from earnings calls to C-suite interviews.