corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0b87b-2ea2-70b4-96d7-9792a4fbd484

Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain

vulncheck.com · published 24 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at vulncheck.com Wayback capture
3blogs citing
First cited
24 Aug 2026
Most recent
13 Sept 2026
Rank this month
not ranked
Links from this post
39
Words captured
2,708

Cited by

Blog
In the post
Date
avleonov.com
About Authentication Bypass - Microsoft SharePoint (CVE-2026-55040) vulnerability Read at the source ↗
13 Sept 2026
news.risky.biz
Risky Bulletin: Russia starts blocking DoH and DoT Read at the source ↗
26 Aug 2026
Rapid7 Blog
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520) Read at the source ↗
24 Aug 2026

Links from this post

Link
Host
https://docs.vulncheck.com/initial-access/2026-08-21
docs.vulncheck.com
https://console.vulncheck.com/cve/CVE-2026-55040
console.vulncheck.com
https://console.vulncheck.com/cve/CVE-2026-63520
console.vulncheck.com
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040) Read at the source ↗
rapid7.com
https://github.com/sfewer-r7/CVE-2026-55040
github.com
https://x.com/DefusedCyber/status/2087456962896093522
x.com
https://kevintel.com/CVE-2026-55040
kevintel.com
https://console.vulncheck.com/browse/kev
console.vulncheck.com
https://console.vulncheck.com/ti
console.vulncheck.com
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED) Read at the source ↗
rapid7.com
https://learn.microsoft.com/en-us/sharepoint/administration/business-connectivity-services-overview
learn.microsoft.com
https://www.google.com/url?q=https://support.microsoft.com/en-us/servicing/office/hotfix/august/5002893&sa=D&source=docs&ust=1787517750906149&usg=AOvVaw1FNuEh_DmSh79Wv5EOmBY2
google.com
https://blog.stefan-gossner.com/2026/08/14/trending-issue-bcs-type-is-not-in-the-bcsallowedtypenames-generic-list-after-august-2026-cu/
blog.stefan-gossner.com
https://learn.microsoft.com/en-us/visualstudio/sharepoint/creating-a-business-data-connectivity-model?view=visualstudio
learn.microsoft.com
https://learn.microsoft.com/en-us/sharepoint/dev/scenario-guidance/line-of-business-integration
learn.microsoft.com
https://learn.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2007/ms551230(v=office.12
learn.microsoft.com
https://learn.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2007/ms566019(v=office.12
learn.microsoft.com
https://console.vulncheck.com/cve/CVE-2023-24955
console.vulncheck.com
https://www.zerodayinitiative.com/blog/2019/9/18/cve-2019-1257-code-execution-on-microsoft-sharepoint-through-bdc-deserialization
zerodayinitiative.com
https://docs.vulncheck.com/initial-access/2026-02-27
docs.vulncheck.com
https://learn.microsoft.com/en-us/dotnet/api/system.activator.createinstance?view=net-10.0
learn.microsoft.com
https://github.com/SharePoint/sp-dev-docs/blob/main/docs/schema/property-element-in-properties-bdcmetadata-schema.md
github.com
https://dev.to/moh_moh701/static-classes-vs-instance-based-classes-in-c-l59
dev.to
https://learn.microsoft.com/en-us/dotnet/api/system.diagnostics.process.start?view=net-10.0
learn.microsoft.com
Making Serialization Gadgets by Hand - .NET Read at the source ↗
vulncheck.com
https://learn.microsoft.com/en-us/dotnet/api/system.web.ui.losformatter?view=netframework-4.8.1
learn.microsoft.com
https://learn.microsoft.com/en-us/dotnet/api/system.web.ui.losformatter.deserialize?view=netframework-4.8.1
learn.microsoft.com
https://learn.microsoft.com/en-us/visualstudio/sharepoint/designing-a-business-data-connectivity-model?view=visualstudio
learn.microsoft.com
https://learn.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2007/ms550743(v=office.12
learn.microsoft.com
https://learn.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2007/ms493162(v=office.12
learn.microsoft.com
https://learn.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2010/ee556424(v=office.14
learn.microsoft.com
FileRun: When Your File Manager Runs Your Files Read at the source ↗
vulncheck.com
Death By 20,000 PoCs Read at the source ↗
vulncheck.com
ENDLESSDOORS Is Phoning Home. Pick Up. Read at the source ↗
vulncheck.com
https://console.vulncheck.com/browse
console.vulncheck.com
https://www.vulncheck.com/product/canary-intelligence
vulncheck.com
https://www.vulncheck.com/product/target-intelligence
vulncheck.com
https://www.vulncheck.com/product/exploit-intelligence
vulncheck.com
https://docs.vulncheck.com/initial-access
docs.vulncheck.com