Skip to content
Back to Guavy Wire
Stocks

Ransomware Gangs Exploit Microsoft SharePoint Flaw

Instruments
MSFT
Share

A high-severity Microsoft SharePoint vulnerability is being exploited by ransomware gangs, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-45659, allows attackers with low privileges to execute arbitrary code on unpatched SharePoint servers.

The vulnerability was added to CISA's Known Exploited Vulnerabilities Catalog (KEV) on July 1, after which Federal Civilian Executive Branch agencies were ordered to secure their servers within three days. Despite this, Shadowserver reports that over 8,500 Microsoft SharePoint servers are exposed online, with over 200 of them unpatched against the CVE-2026-45659 vulnerability.

CISA has warned that vulnerabilities like this one pose significant risks to the federal enterprise and have been frequently used by malicious cyber actors. The agency has urged security teams to monitor affected servers for signs of exploitation, apply Microsoft's latest patches, and shorten patching cycles.

More on Stocks

Disclaimer: Guavy is a data and market intelligence provider, not an investment advisor. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc