SharePoint Server 2019

Reported Context (3)

The affected products are SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. October 2026 Threat Report Covers EvilTokens Disruption, Exploited Flaws and M365 Spraying
Microsoft patched the vulnerability as part of the July 2026 Patch Tuesday updates, when it warned customers to patch systems running SharePoint Enterprise Server 2016 and SharePoint Server 2019. Rapid7 SharePoint Exploit Reportedly Used Against Honeypots
Microsoft SharePoint Server 2019 (Standard and Enterprise) July 2026 SharePoint Flaw Analysis Details Exploit Chains and Defenses

CVE (9)

People (3)

Threat Actors (1)

MITRE ATT&CK (18)

Vendors (2)

Products (20)

Tools (6)

Industries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.