CISA added four exploited flaws to its KEV Catalog, hitting SharePoint, VMware vCenter, macOS, and Windows IKE. Patch by August 21. Related Posts: CVE-2026-13737: Commvault Command Execution Flaws Expose Networks CVE-2026-18051 (CVSS 10): Unauthenticated Arbitrary File Write Hits 900k W3 Total Cache Sites CVE-2026-21580: Stored XSS Hits Atlassian Confluence The post CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter appeared first on Daily CyberSecurity.

Rapid7 published full details and a PoC for CVE-2026-55040, a critical SharePoint authentication bypass that forges JWT tokens. Patch now. Related Posts: Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed The post CVE-2026-55040 PoC Released for SharePoint Authentication Bypass appeared first on Daily CyberSecurity.