CVE-2026-65660Vulnerability
Microsoft SharePoint Code Injection Vulnerability
Reported by 9 independent sources · first reported by The Hacker News · last reported
Last reported 12 days ago
Fix due 28 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 81% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
37 reports · the newest 20, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-65660”
-
Cyber Brief 26-10 - September 2026“The activity appeared to chain an anonymous access weakness with CVE-2026-65660 to achieve pre-authentication code execution and establish persistence via a webshell.”
-
Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks“Related: Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Pentagon Personnel Agency Data Breach Impacts 3 Million People“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Call for Presentations Open for 2026 CISO Forum Virtual Summit“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
DC Health Agency Exposes 400,000 Beneficiary Records“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog“Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability“Related: Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug“Related: Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-65660”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-88771, CVE-2026-19490, CVE-2026-88772, CVE-2026-35273, CVE-2026-87491, CVE-2026-87902, CVE-2026-67279, CVE-2026-93616, CVE-2026-94127, CVE-2026-5430, CVE-2026-83548, CVE-2026-83549, CVE-2026-82329, CVE-2026-93952, CVE-2026-7273, CVE-2026-86950, CVE-2026-60004, CVE-2022-0847, CVE-2026-1731, CVE-2026-85046
Thanks — we review every report.