CISA Warns of Microsoft SharePoint Vulnerability Exploited in Attacks

CISA confirmed active exploitation of a critical Microsoft SharePoint deserialization vulnerability (CVE-2026-20963) that allows unauthenticated remote code execution; the flaw was added to the Known Exploited Vulnerabilities catalog and federal agencies were ordered to patch or mitigate all vulnerable instances immediately under a tight remediation deadline.