Critical SharePoint zero-day exploited in global attacks — no patch yet for 2016

A critical zero-day in Microsoft SharePoint Server is being actively exploited in global cyberattacks, affecting at least 54 organizations across multiple sectors. Tracked as CVE-2025-53770, the flaw has a severity score of 9.8 and currently has patches for later versions but no patch is available for the 2016 version. Attackers can execute code remotely without […]