CVE-2025-53771 - EncryptedFence by Certera

(10 votes, average: 5.00 out of 5)

ToolShell Zero-day: U.S. CISA urges FCEB Agencies to Fix 2 Microsoft SharePoint Flaws Immediately

What Happened? A new zero-day vulnerability in Microsoft SharePoint Server, known as ToolShell, is being actively exploited. The flaw, CVE-2025-53770, is classified as critical and has already been exploited in monkey patches across federal agencies in the U.S., as well as in governments in Europe and the enterprise energy and…