🚨 CVE-2026-45659 — SharePoint Server RCE (CVSS 8.8)

Confirmed actively exploited. Added to CISA's Known Exploited Vulnerabilities catalog on July 1.

Microsoft patched this quietly in May — the security bulletin wasn't published until three weeks later. Root cause: unsafe deserialization. An attacker only needs Site Member access, not admin.

Affected: SharePoint Server Subscription Edition, 2019, and Enterprise 2016.

Full breakdown + patch guidance:
https://exploitgrid.net/blogs/cve-2026-45659-sharepoint-rce-active-exploitation

#CVE #SharePoint #CISAKEV #VulnerabilityManagement

🔴 CVE-2026-56155 — AD FS Privilege Escalation, Actively Exploited
Local attacker with low privileges → admin, on Microsoft AD FS servers. CVSS 7.8. Microsoft confirmed exploitation in the wild; ZDI says it chains well with RCE for ransomware. No public PoC yet, but that hasn't stopped active use.
Affected: AD FS on Windows Server 2012–2025 and related Server Core builds.

Full writeup: https://exploitgrid.net/blogs/cve-2026-56155-ad-fs-privilege-escalation-bug-is-already-being-exploited

#ADFS #CISAKEV

🚨 CRITICAL: Metabase RCE — CVE-2026-59827
CVSS 9.9
⚠️ Unsafe deserialization in H2 query handling → authenticated users can get full RCE
🎯 Target: default Sample DB (ships in every Metabase install)
🔧 How: SELECT X'...'::OTHER smuggles a malicious payload into ObjectInputStream.readObject()
📌 Affected:

OSS 0.58.0 – 0.61.1.3
Enterprise 1.58.0 – 1.61.1.3

✅ Fix: Upgrade to 0.61.1.4+ / 1.61.1.4+
🩹 Can't patch now? Revoke native query perms on H2 DBs
🔗 Also check CVE-2026-59826 (H2 connection string RCE), dropped same day
🧪 We reproduced this in an isolated lab to validate patch behavior — full writeup with gadget chains + lab setup:
👉 https://exploitgrid.net/blogs/cve-2026-59827-vuln-and-exploit-working
⚖️ Lab research, defensive purpose only — don't test this on systems you don't own/have permission for.
#Metabase #CVE #RCE #InfoSec

🔴 CVE-2026-9810 | CVSS 9.8

AI Copilot WordPress Plugin — OAuth token binding failure grants unauthenticated admin access.

▪️ Affected: < 1.5.4
▪️ Fixed: 1.5.4
▪️ Auth required: None

Public exploit details are available. Full technical breakdown, detection queries, and remediation steps on ExploitGrid.

🔗 exploitgrid.net/blogs/cve-2026-9810-unauthenticated-rce