CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities

Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days. The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek .

The article reports that CISA is urging immediate patching of multiple Microsoft SharePoint server vulnerabilities that are under active exploitation, including at least two zero‑days, enabling remote code execution and unauthorized access to on‑premises environments.[1][3][10] These flaws affect supported on‑prem SharePoint Server versions and have been added to CISA’s Known Exploited Vulnerabilities catalog, triggering mandatory patch timelines for federal agencies.[1][7] From a RealGround perspective, exploited SharePoint vulnerabilities represent a critical software supply chain and infrastructure risk for any AI agents or models that depend on data, identities, or workflows hosted in SharePoint: compromise of these systems can corrupt training data, leak sensitive inputs/outputs, and provide an entry point to pivot into AI platforms. Organizations should treat SharePoint as a key upstream dependency in their AI supply chain, ensure rapid patching and hardening, and incorporate these CVEs into SBOM-based monitoring and AI security readiness assessments.