CVE-2026-58644: listed in the CISA KEV catalog
CVE-2026-58644 · CVSS 9.8 CRITICAL · KEV 2026-07-16 · patch available
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Is CVE-2026-58644 exploited?
- Listed in the CISA KEV catalog on 2026-07-16.
- Federal remediation due 2026-07-19.
- Past that date by 27 days.
- Public exploit code: none found in monitored sources.
- Public detection rules exist.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
What PlainSec published about CVE-2026-58644
PlainSec has not published a story about this CVE.
Primary sources
What this record does not say
- No EPSS score.
- No affected package data.
KEV and EPSS are re-checked daily. Record last updated 2026-08-14.