Description
Microsoft SharePoint Server 是微软（Microsoft）公司推出的企业级内容协作与文档管理平台，提供企业门户、文档共享、业务流程协作、企业搜索与社交等功能，广泛应用于大型企业的内部知识管理与团队协作场景，通常部署于 IIS 之上。Microsoft SharePoint Server /_trust/default.aspx 接口存在代码执行漏洞，攻击者可通过该接口在服务器上执行任意系统命令，写入后门并获取服务器控制权限。
Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞（CVE-2026-50522）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://sn1persecurity.com/wordpress/cve-2026-50522-sharepoint-rce-detection-with-sn1per/
https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations
https://dbugs.ptsecurity.com/vulnerability/PT-2026-58208
https://zerohunt.ai/blog/sharepoint-cve-2026-50522-machine-key-theft
https://colibrisec.org/cve-2026-50522-microsoft-sharepoints-next-deserialization-rce-exploited-days-after-a-public-poc/
https://launchweld.com/blog/2026-07-24/cve-2026-50522-sharepoint-rce/
https://nguard.com/sa-sharepoint-cve-2026-50522/
https://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/
https://www.orangecyberdefense.com/global/blog/cert-news/multiple-microsoft-sharepoint-server-vulnerabilities-actively-exploited-including-critical-cve-2026-50522
https://labs.beazley.security/advisories/BSL-A1190
https://www.cve.org/CVERecord?id=CVE-2026-50522
https://digital.nhs.uk/cyber-alerts/2026/cc-4818
https://github.com/advisories/ghsa-ww8x-9jc5-9v7f
https://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/
https://www.cybersecuritydive.com/news/microsoft-sharepoint-attack-new-exploit/825797/
https://threats.vega.io/brief/cve-2026-50522-sharepoint-deserialization-rce
https://kudelskisecurity.com/research/widespread-exploitation-of-microsoft-sharepoint
https://cert.europa.eu/publications/security-advisories/2026-009/