Critical Vulnerability in Microsoft SharePoint (CERT-EU Security Advisory 2026-009) On 14 July 2026, Microsoft released a security update addressing a critical Remote Code Execution (RCE) in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code, and later, successful exploitation attempts. CERT-EU strongly recommend to update affected servers and to rotate credentials on any assets that may have been vulnerable and exposed on the internet. https://www.cert.europa.eu/publications/security-advisories/2026-009/