tag
IIS
CVE-2025-53770, CVE-2025-53771, CVE-2025-49704, CVE-2025-49706
web
CRITICAL
KEV
Ransomware
EPSS 100%
ToolShell - SharePoint Unauthenticated RCE Chain
CVE-2025-53770 ("ToolShell") is a full unauthenticated remote code execution chain against Microsoft SharePoint Server. The chain combines an authentication bypass in the ToolPane.aspx endpoint (CVE-2025-49706 / patch bypass CVE-2025-53771) with an unsafe…
Patched
2026-05-17
CVE-2026-42897
web
MEDIUM 5.3
KEV
EPSS 70%
Exchange Health Checker Outbound Rule Blind Spot (CVE-2026-42897)
CVE-2026-42897 describes a diagnostic blind spot in Exchange Health Checker. The analyzer only enumerates inbound IIS URL Rewrite rules and ignores outbound rules. The EOMT mitigation for this CVE installs an outbound Content-Security-Policy rewrite rule…
Unverified
2026-05-15