Skip to main content
عربي
logo

NCSC-TAD-2507-001

Severity Level: Critical
Vulnerability

Reference No.: NCSC-TAD-2507-001CVSS 0

Actively Exploited Vulnerability in Microsoft SharePoint Server

Threat Type:
N/A
TLP:
CLEAR
CVE:
CVE-2025-53770

Overview

An attacker who can reach a vulnerable SharePoint server can run code without signing in. Successful exploitation can expose SharePoint signing keys, which attackers may use to regain access after the server is patched. Microsoft confirmed exploitation.

Affected Technologies

  • Microsoft SharePoint Server

Mitigation and Immediate Actions

  1. 01

    Install the applicable Microsoft security update for your SharePoint Server edition.

  2. 02

    Check for signs of compromise. After patching, rotate the SharePoint ASP.NET machine keys and restart IIS.

References