ctrlINT What the industry said about every indicator, with the quote

CVE-2025-53770Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by Huntress · last reported

Last reported 1 month ago

CISA KEVAdded 20 Jul 2025
Fix due 21 Jul 2025
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

  1. “CVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server”

    Kaspersky SecurelistVendor
    Exploits and vulnerabilities in Q2 2026

  2. “At that time, we observed active ToolShell attempts exploiting CVE-2025-53770 and CVE-2025-53771.”

    HuntressVendor
    Velociraptor Misuse, Pt. II: The Eye of the Storm

Indicators reported together

named in the same reports

Also named with it: CVE-2026-43284, CVE-2025-8088, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494, CVE-2026-46331, CVE-2022-0847, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233, CVE-2026-35273, CVE-2023-46604, CVE-2024-12356

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-53770 here?
No account needed. We do not store your IP address.