CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

Source: The Hacker News | Added:

CISA has identified two Microsoft SharePoint vulnerabilities, CVE-2025-49704 and CVE-2025-49706, that are actively being exploited by Chinese hackers. Federal agencies are mandated to address these vulnerabilities by July 23, 2025, following their addition to the Known Exploited Vulnerabilities catalog.

---

Impact: Microsoft SharePoint

In the Wild: Yes

Age: Newly disclosed

Remediation: Remediate identified vulnerabilities by July 23, 2025.

Read Full Original Article →