security1 publisher
ToolShell's author publishes a working code-execution exploit for SharePoint's CVE-2026-65660
Dinh Ho Anh Khoa's writeup turns CVE-2026-65660 into authenticated remote code execution on SharePoint 2016, 2019 and Subscription Edition. Microsoft's advisory scores the flaw 6.5 and calls it spoofing. NVD scores it 8.8.
Publishers:thehackernews.com
Reality
- Evidence65
- Adoption25
- Hype gap−12
- Incentives50
- Confidence58