other

DbTypeReflector

SharePoint BDC class whose ResolveDotNetType() method calls Type.GetType() on attacker-controlled type names without validation.

Sign in to follow

Known aliases

Microsoft.SharePoint.BusinessData.SystemSpecific.Db.DbTypeReflector

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

SharePoint RCE detections keyed to one exploit will miss the other, after CVE-2026-63520 leaks early

A third party published CVE-2026-63520 before the planned date, and two public gadget chains now reach the same flaw by different routes. One signature will not cover both.

Publishers:blog.rapid7.com

Reality

Evidence74
Adoption32
Hype gap+6
Incentives62
Confidence68