cve 2026 58644

The cve 2026 58644 tag covers Microsoft’s critical unauthenticated remote code execution vulnerability affecting supported on-premises editions of SharePoint Server. The flaw, tracked by Microsoft as CVE-2026-58644, stems from the deserialization of untrusted data in Microsoft Office SharePoint. It carries a CVSS 3.1 base score of 9.8 and may be exploited over a network without credentials or user interaction. A successful attack could affect confidentiality, integrity, and availability by allowing remote code execution. This tag follows Microsoft’s security disclosure and the related June updates intended to address the vulnerability in affected SharePoint Server products.