Documented CVEs
6 vulnerabilities cataloged in the Hermes intelligence repository.
Microsoft SharePoint Server — Security Intelligence & Vulnerability Profile
1. Software Identity & Security Posture
Section titled “1. Software Identity & Security Posture”| Parameter | Technical Specification |
|---|---|
| Official Name | Microsoft SharePoint Server |
| Vendor / Project | microsoft |
| Canonical ID | microsoft:sharepoint_server |
| Versioning Scheme | generic |
| CPE Identifiers | cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:* |
| Overall Posture | CRITICAL |
| Recommended Safe Release | 16.0.18526.20508 |
CISA KEV Entries
6 flaws with confirmed active in-the-wild exploitation.
Weaponized Exploits
6 vulnerabilities with publicly available PoCs or weaponized exploit tooling.
Remediation Target
Recommended upgrade to 16.0.18526.20508 to neutralize known flaws.
2. 30-Day Risk Trajectory & Trend Evolution
Section titled “2. 30-Day Risk Trajectory & Trend Evolution”Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:
Current HTS Score
0 / 100
= Stable over 30d
Max EPSS (Exploitation)
100.0 %
= Stable over 30d
CISA KEV Activity
6
Active in-the-wild exploitation
HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10
3. Vulnerability History & Version Applicability Matrix
Section titled “3. Vulnerability History & Version Applicability Matrix”| CVE | CVSS Score | EPSS Probability | CISA KEV | Affected Versions | Fixed In | Hermes Analysis |
|---|---|---|---|---|---|---|
| CVE-2026-50522 | 9.8 (CRITICAL) | 85.4% | CISA KEV | < v16.0.17328.20000 | 16.0.17328.20000 | Analysis → |
| CVE-2026-58644 | 9.8 (CRITICAL) | 60.9% | CISA KEV | < v16.0.17328.20000 | 16.0.17328.20000 | Analysis → |
| CVE-2025-53770 | 9.8 (CRITICAL) | 100.0% | CISA KEV | < v16.0.5513.1001, < v16.0.10417.20037, < v16.0.18526.20508 | 16.0.5513.1001, 16.0.10417.20037, 16.0.18526.20508 | Analysis → |
| CVE-2026-55040 | 8.8 (HIGH) | 50.6% | CISA KEV | < v16.0.17328.20000 | 16.0.17328.20000 | Analysis → |
| CVE-2025-49704 | 8.8 (HIGH) | 100.0% | CISA KEV | < v16.0.5513.1001, < v16.0.10417.20037, < v16.0.18526.20508 | 16.0.5513.1001, 16.0.10417.20037, 16.0.18526.20508 | Analysis → |
| CVE-2026-32201 | 6.5 (MEDIUM) | 43.4% | CISA KEV | < v16.0.17328.20000 | 16.0.17328.20000 | Analysis → |
4. Ransomware & Threat Actor Exposure
Section titled “4. Ransomware & Threat Actor Exposure”Vulnerabilities impacting Microsoft SharePoint Server are actively leveraged in real-world intrusion campaigns:
- CVE-2026-50522: Known in opportunistic exploitation (Read deep dive analysis)
- CVE-2026-58644: Known in opportunistic exploitation (Read deep dive analysis)
- CVE-2025-53770: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53770 (Read deep dive analysis)
- CVE-2026-55040: Known in opportunistic exploitation (Read deep dive analysis)
- CVE-2025-49704: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49704 (Read deep dive analysis)
- CVE-2026-32201: Known in opportunistic exploitation (Read deep dive analysis)
5. Evaluate Running Versions in Interactive Workbench
Section titled “5. Evaluate Running Versions in Interactive Workbench”Are you operating Microsoft SharePoint Server in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:
Launch Software Intelligence Workbench for Microsoft SharePoint Server Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.