Microsoft patches actively exploited SharePoint RCE vulnerability CVE-2026-58644

Microsoft has released a patch for a critical remote code execution vulnerability in on-premises SharePoint versions following confirmed exploitation in the wild. CISA has added the flaw to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agency remediation. The scope of the threat actors involved remains undisclosed.