4 articles tagged
October 13, 2026 is the final cutoff for Windows Server 2012 R2 Extended Security Updates. SharePoint Server 2016 and 2019 already lost support on July 14, with no ESU. Compare migrate, ESU, and modernize with real
Two unauthenticated SharePoint Server RCEs, CVE-2026-50522 and CVE-2026-58644 (both CVSS 9.8), are exploited in the wild. Patching alone will not evict an attacker who stole your machine keys.
Microsoft's July 2026 Patch Tuesday fixed a record 570 flaws, including two zero-days already under attack. AI-assisted discovery is why the number exploded, and why the old triage signals stopped working.
CISA added SharePoint RCE CVE-2026-45659 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog with a July 4, 2026 federal deadline. Here is the defensive patch-and-harden checklist for on-premises SharePoint Server.
