Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.

Microsoft has announced patches for 622 vulnerabilities, including exploited zero-days in Active Directory and SharePoint Server.

Microsoft fixes a record 622 CVEs, including two exploited SharePoint and AD FS zero-days, while a Kerberos RC4 change could break service account log