CISA warns of active exploitation of critical Microsoft SharePoint vulnerability CVE-2026-20963

The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of a critical remote code execution vulnerability in Microsoft SharePoint, tracked as CVE-2026-20963.

• Updated CISA exploited flaws list adds SharePoint, Zimbra bugs
  SC Media · scworld.com
• Unknown attackers exploit yet another critical SharePoint bug
  theregister_security · go.theregister.com
• CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963)
  Help Net Security · helpnetsecurity.com
• Critical Microsoft SharePoint flaw now exploited in attacks
  bleepingcomputer_all · bleepingcomputer.com