Three Critical Unauthenticated Flaws: SharePoint, Zoom, and WireGuard Easy
Three Critical Unauthenticated Flaws: SharePoint, Zoom, and WireGuard Easy
On 16 July 2026, CISA confirmed active exploitation of CVE-2026-58644, a critical deserialization vulnerability in Microsoft SharePoint that requires no authentication. The same day brought two additional severe vulnerabilities: CVE-2026-53412 in Zoom Workplace for Windows (CVSS 9.8) enabling account takeover, and CVE-2026-63089 in WireGuard Easy (CVSS 9.3) exposing VPN credentials through a trivially exploitable token generation flaw. All three vulnerabilities share a dangerous pattern: they require no credentials…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.