AI Summary

Threat actors are exploiting a two‑step vulnerability chain in Microsoft SharePoint that enables remote code execution on unpatched installations. The first flaw, identified as CVE‑2026‑55040, bypasses authentication in the JWT token validation process, allowing attackers without prior access to act as a site user or administrator.

AI summaries can be wrong sometimes—always verify important details using the source article.