Jul 222026 Critical SharePoint RCE CVE202650522 Under Active Exploitation After Public PoC WatchTowr reports active exploitation of SharePoint CVE-2026–50522 after a public PoC, with attackers stealing machine keys for persistence.
