Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on The Register.