CISA Adds One Known Exploited Vulnerability, CVE-2025-53770 “ToolShell,” to Catalog

Source: All CISA Advisories | Added:

CISA has added the Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2025-53770) to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. This vulnerability poses significant risks to federal networks and CISA urges all organizations to prioritize remediation.

---

Impact: Microsoft SharePoint Server

In the Wild: Yes

Age: Newly disclosed

Remediation: Apply the recommended mitigations as per CISA's Alert.

Read Full Original Article →