Vulnerability threat dossier
Metadata pending authoritative retrieval.
VTP analyst assessment
CVE-2026-45659 is also KEV-listed and mapped by the same secondary report to ransomware exploitation and a public PoC. Analysts should urgently determine whether both CVEs are implicated or whether the report-to-CVE resolution is overly broad.
1 evidence references and 1 source references passed trusted post-response validation. The current deterministic record contains 0 independent evidence groups.
No first-party sensor telemetry is configured. Local exploitation observation is unknown.
A validated functional exploit or automated exploitation capability would materially change this assessment.
Previous AI priority: CRITICAL → current: CRITICAL. Inspect the evidence preserved for each run before treating this as a threat transition.
VTP deterministic assessment
CISA KEV lists this vulnerability as known to be exploited globally.
A proof of concept is reported; functional reliability is not established.
EPSS is 0.09; this is predictive context, not exploitation evidence.
No first-party sensor telemetry is configured; first-party observation is unknown.
Material change ledger
Claim provenance
0 primary sources · 0 dependent secondary reports · 1 reports with unresolved independence. Repetition remains visible without multiplying confirmation.
Event history
BleepingComputer supplied a deterministically extracted signal; review the linked evidence before escalation.
BleepingComputer supplied a deterministically extracted signal; review the linked evidence before escalation.
CISA lists global known exploitation. This is not a VTP sensor observation.
Original publications
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July. [...]
Technical vulnerability data
Raw observations
No first-party sensor telemetry configured.