CVE-2025-49706

Medium (6.5) in Microsoft SharePoint. In CISA KEV since 2025-07-22, with known ransomware use. EPSS 99% chance of exploitation in the next 30 days.

EPSS

99% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)

CISA KEV

listed 2025-07-22, due 2025-07-23, known ransomware use

CWE

CWE-287

Published

2025-07-08

Modified

2026-08-04

Record from

the NVD, synced 2026-10-19

Affected

• microsoft:sharepoint_enterprise_server
• microsoft:sharepoint_server

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49706
• https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/

Check your stackJSON