CVE-2026-50522

Think of SharePoint as a building that receives messages from the internet. This flaw is like a “mailbox” that can be tricked into opening and acting on malicious instructions instead of treating the message as data. That can let an attacker take control of the server and disrupt your business.

This matters if you run Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, or Microsoft SharePoint Server Subscription Edition for your company. The issue is reachable over the network and does not require a login or user action. The risk is highest when the vulnerable SharePoint endpoints are reachable from the internet (or otherwise accessible to untrusted parties).

This should be treated as RED urgency because it is a remote code execution flaw: attackers can send crafted network data that causes arbitrary code execution, without needing authentication. Even though there’s no confirmed public exploit code or clear dated exploitation reports in the findings, the combination of remote reachability and no-login requirement makes patching the safest move now.