SharePoint 0-Day RCE Vulnerability

Heloise Meyer | July 25, 2025, 1:12 p.m.

Further information on the SharePoint 0-Day RCE Vulnerability (CVE-2025-53770)

Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability (CVE-2025-53770) [CISA, CISA]

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers [Ravie Lakshmanan, The Hacker News]

Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) [Zeljka Zorz, Help Net Secuity]

Customer guidance for SharePoint vulnerability CVE-2025-53770 [Microsoft, Microsoft]

CVE-2025-53770 Detail [NIST, NIST]

Understand the SharePoint RCE: Exploitations, Detections, and Mitigations [Akamai, Akamai]

Disrupting active exploitation of on-premises SharePoint vulnerabilities [Microsoft, Microsoft]