# Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

> **Newsylist Open Intelligence Dossier** · First detected: 2026-07-21 20:29 UTC · Category: Technology · Sources: 10 · Current Velocity: 9.49

## Executive Summary
10 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

## Intelligence Brief
"Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC" is generating significant coverage in the Technology category, with 12 articles from 10 distinct sources tracked by Newsylist so far.


Outlets currently covering the story include Help Net Security, SecurityWeek, SC Media and Kaseya. Newsylist measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


Synthesized from multi-source international reporting and live coverage telemetry under Newsylist open intelligence methodology.

## Verified Facts & Key Claims
### Why is "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public Po" trending?
Because 10 independent news sources published 12 articles about it in a short window — a coverage burst Newsylist classifies as a trend.

### How does Newsylist measure this trend?
Newsylist scores velocity from the rate of new articles weighted by source diversity, snapshotted hourly. The full method is public on our methodology page.

### Is this trend still active?
The status badge on this page updates hourly: rising, peaking, cooling, or archived once coverage stops for 48 hours.

## Key People, Organizations & Locations
Patch, SharePoint, Wave of Attacks, Fourth SharePoint Vulnerability Exploited, CVE-2026-50522, Another SharePoint RCE, Datenschutzverletzungen, Nachrichten, Die Woche, Exposed SharePoint Server Into

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Help Net Security | Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMihgFBVV95cUxPX3Voc3lQYm4wVDZwVjNLelBZa0g5VkdoZGE0WV9jMERhVWoyY2NFX0tzYWxpR1hsbDEtRHhYWVp5ODBIQllpRnE3TUI3UkdISXktVjBxRjVZbmd5OEcwQ3ljeDVsRW5UQzJ6ZHRrSy1UR0xrelJiM0dLbDkwLUtWOEJXWWwxZw?oc=5) |
| SecurityWeek | Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxPWWZ5RG9jWHRSMmpfcG5uX2RwZTM3Y2hQUXgwVFVjWGtlcVd6dWV2ejl3RnNqbW5IVDB6dnhESFVTejlaUFB6X0NpV3BQYUVveGtPaWV5VG5sWGQ1S1c0b1VRYkRNM21JZ1htQlc4SjZKcjJwVkx2TTVHSG5vc05WallJWlhLZHNQY0UxX1Y4R3ZXTDFwdHkzS1JsQmZ0MWNMQUhia9IBqgFBVV95cUxPbHZkVTduNUhMZTg0N2Y1dmsyUGZEQk50N19FNk1aeFZWdWx5U1dfWFZpLW1KcHl4MmoyVnhILV8xSk5LMHo5Qnl4dmIzVXB6QmhwTzctZlpRWDFaRmVGckhWdlRzV1JCOW1aeW9uYTFacUNwenRadUNTbDAtdFpYd19HbHVjeFZRbEtOOFdyMWp3V2RtOVNHOWZQRmxxMDdvWFZBSC1mVUtXUQ?oc=5) |
| SC Media | SharePoint vulnerability steals machine keys; fourth recent exploit | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMimwFBVV95cUxOaG5ERUY0MHphVUxsLTdadlYxQ2Fla1JiSkdfeDViMnN0WDI4eUxmeXMzaFZ2azZNZWlzSEpwYl9YWmJuOVBMV3NtMG01QnhkcVNUV1Z3czlJTm5yd1lzQ1pxX3hDaXVTUTBhQVBVdEVXanVOOVBQdUQyVzRocTFhT0tRaFlETDNUSHJZUE90ZGNsd1RtQXVrbmhpWQ?oc=5) |
| Kaseya | Die Woche in den Nachrichten zu Datenschutzverletzungen | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTFBqU2xYbXBTTlNvUkpWSm8ydXpPQjV1UnB0bnhkWndBd1VxT2Y2dkN5RGNlMGR0cWFZdlZFOHBSd21Rb0J6cldtdUJzWU1Wc1FTN01RUzhRZnlQNTFKallRX0dXVGNDbkNEYXJ0LThIRU5uUQ?oc=5) |
| CyberSecurityNews | Critical SharePoint Remote Code Execution Vulnerability Actively Exploited in the Wild | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTFAwTXo2ckQzbW43YkdPal9ZMVFmazRXcFZkeUE5U1NDR0p1S0NSTy1kQUFYM3B0UzlXWFUyVmJYQ195NFFvY0sxTjBDZnk3VXkxRm04TU0zUjBYS05oVTdMWFlYaGk5cmF2QWJKcnZoT09MZW1Qd3fSAXtBVV95cUxPajN1UXdmT1ZRdzhzb2JoOFU0RVJNNXBxUHRaSDRZVTVJX1c5b01lZEt6V3EweG1lN1g2WjRJX05aNHJHS1pVc2xLVGk1bU1VZGk2MTRrbzEyaHFkTkhpU2YtekdneHdHWTB6VjZrSk9henNqajhhYXNnbEU?oc=5) |
| Resecurity | From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMiwgFBVV95cUxPWkd4ZXV3RkFIRlRVak94T0lqWW5WSHozX1ZBY2gxTTk2SmE0MWY1RzY1U21sbHVDcWsxVXB5LWNxX0g0UWJsRHZRRE5KN2d6UEl5eGtHNWY2TTc3Sk42TVFpVFkteF8tMmhVVVRBYm9IRk5KM0tBdG51REJoWHBfODFkOWN3QXpIbEE2ZVUxcDdhZkhMVXQzMU5tZ2w2MmxlTm9SN2hoeHBoTFYzbUVjZDRfUU5wWWRRTVdUZlI0bjhXdw?oc=5) |
| Kaseya | The Week in Breach News: July 15, 2026 | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMiWkFVX3lxTE9HeW52ZGdCT1JBZE1kZ2J6dUlQRVM1aEZhbHpXaklUSXI1Vm1oUzdIMFFjNjcyNzNGRTdGT2hBYk9QN256T0pYQnNNNC1IVGhBS0o5TUNjX25kUQ?oc=5) |
| gbhackers.com | One Malicious Web Request Can Turn an Exposed SharePoint Server Into a Persistent Backdoor | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMidEFVX3lxTE5wdVhRRUhCMS11TjRNQnVRZWFYbmxuRkJGOUNDUTA2MHByR3dqaS1HQW1rZlhHYWtsX1l5UENhNnJOWTV6b25GTGt5dDhqcXRodFJ4WFNxb3dfNVZrLXdBX01BQTZTSnRMaVRsV0dfby1hc0Ru0gF6QVVfeXFMTlRJV0NYT3MyN1lwVjh5OWIyaVc5ckhFTXY4bUxmRzl2dE8tY1ZtOTYwbHVGOU1wWGNSc1g1Q01ZeXRLdDk5Q3g4WUR2cFdNcmlxTnVxcVo0bGFOOFViQ2tZc1VCa3p6OWFnMUF4RXZ3QXk4MllPbGpTOHc?oc=5) |
| Cybersecurity Dive | Microsoft SharePoint under attack via new exploit | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxOQ09qMWhabGFtT05pek1CeEVjeXZ4S21QalpqOXNmTXdFODJDSTB0ZzdBb29IVjlYYk1Bc2FyMThJOE5VSVVZRDRuaGRQRU81UXZNX2V4WEYyUllKdW5UcHhjRHJLS0tzUjItZ0loRFRJa01OZTQwY1Q3b3dZN0FVMG94UzdLOExOdGZiY3oxTQ?oc=5) |
| BleepingComputer | Critical SharePoint RCE flaw exploited to steal machine keys | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMirAFBVV95cUxPWnpXQTAwcmEtRVlkNmQtWldmRTNySGlJWmJzajdheE0zREVOMmFpUGdhbUtvcUdNSUFMeUpxMkNEOEE2VWZyWFc5bFNmR0NyT3M5ZWNZdHlZWk9iMjFjYlVIclFwMUw1aHgteUsyak50SmxNQlVUeGd1WGJWNnBnQzg5NGx0NWdpb1VzUlhIemJPVEkzX3FGR21BOGNPV3RiSjMtUDM5cXZ0cDJN0gGyAUFVX3lxTFBMeGhaZkprMnk1U0w0SHIxNkE2NVZyMml3clhwZ0ZQeFFLQV9oRFdleUsxNjEtSEhWQ21xV1c5dmdfeVVvZkZObE5RR3NUS1lpa1dOS3p5QWppM3Z5RWVHNVRjREc5NWpxUEVJaWhWWm5OTks3LWUyOTgxMDc0YlFBQThxbWxDTTlrRTVqWjVtc1pKNll0TWpqVERFeUlVa2ZNUUd5dmp) |
| CyberSecurityNews | Microsoft SharePoint Vulnerabilities Actively Exploited for RCE, Web Shells, and IIS Key Theft | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTFAteGFlMmtfQlhndWx0M2hDRmJxYnFJYVRrSktiSkpLNEROZlZnVW5ieHVNTWh3bFlvN25iRHB0QzhaeVo1VU52aXhUUEhhSzFjaDhadTQxd0RvSVFwSzY4aDFiWllpQjUwY1AtZkI5Ulo5c3J3eGfSAXtBVV95cUxQVzlsc0toU3NTTnNwSldxNDZWQ0NrcEVkYnhOWF9XU09tdDVKZmRhRVg4MXVrWHlrV280em5taWRoT2FMVmdkcEp6bmJCSE04aDlNbTVleGhzSndPbTJlb2RZX2U5Y1FrSEx6MFM3QklZdURUZGxPMER2NTg?oc=5) |
| The Hacker News | Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC | 2026-07-21 14:57 | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxPd20wV1l0MGlpRENiMVJKNmx1YjAtUTQ2WHl3aE0xLU4zU2h6RDl4bGRZMHU2UlM0UVRCTDdWaTh6WWxVUk9zWmtqemNZVU45Z0lFTVk0M1QxMjRCYmNpbkJOTzNrckRrakozT01IaHJyQTZKeUsyTllpT3Z6THNvRlJGSQ?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-07-21/critical-sharepoint-rce-cve-2026-50522-under-active-exploitation-after-public*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*