Question 1

What is CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ?

Accepted Answer

Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.

Question 2

What is the authoritative source for CVE-2026-50522?

Accepted Answer

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability  (CVE-2026-50522) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	3.04% probability of exploitation · percentile 87.1% · 2026-10-05T12:00:23Z
Last modified	2026-07-23

CVE-2026-50522Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Description

Scoring

CISA KEV entry