Public PoC Released for SharePoint Remote Code Execution Vulnerability

A working proof-of-concept exploit for CVE-2026-33112, a critical vulnerability in Microsoft SharePoint that allows low-privilege authenticated users to achieve remote code execution by bypassing the XmlValidator security control. The flaw represents a fresh bypass of Microsoft’s second patch for CVE-2025-53770, highlighting the persistent difficulty of fully remediating deserialization-based attack chains in SharePoint’s DataSet handling. PoC […]

The post Public PoC Released for SharePoint Remote Code Execution Vulnerability appeared first on Cyber Security News.