Collaboration & Messaging
CVE-2026-76438: Cisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityNew!!
Cisco published a Medium-rated advisory that includes CVE-2026-76438. Cisco does not separately state a CVE-specific SIR. TechGeeks scope, action, fixed-release guidance, evidence status, and primary Cisco sources.
CVE-2026-20045: Cisco Unified Communications Products Code Injection VulnerabilityNew!!
CISA lists CVE-2026-20045 as exploited. TechGeeks action notice for Cisco Unified Communications Products Code Injection Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-20963: SharePoint unauthenticated deserialization RCENew!!
CISA lists CVE-2026-20963 as exploited. TechGeeks action notice for SharePoint unauthenticated deserialization RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2026-32201: SharePoint unauthenticated spoofing vulnerabilityNew!!
CISA lists CVE-2026-32201 as exploited. TechGeeks action notice for SharePoint unauthenticated spoofing vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2023-21529: Exchange Server authenticated deserialization RCENew!!
CISA lists CVE-2023-21529 as exploited. TechGeeks action notice for Exchange Server authenticated deserialization RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2026-42897: Exchange Outlook Web Access cross-site scriptingNew!!
CISA lists CVE-2026-42897 as exploited. TechGeeks action notice for Exchange Outlook Web Access cross-site scripting, with scope, remediation, investigation guidance, and official sources.
CVE-2026-45659: SharePoint authenticated remote code executionNew!!
CISA lists CVE-2026-45659 as exploited. TechGeeks action notice for SharePoint authenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityNew!!
CISA lists CVE-2026-20230 as exploited. TechGeeks action notice for Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-50522: SharePoint unauthenticated remote code executionNew!!
CISA lists CVE-2026-50522 as exploited. TechGeeks action notice for SharePoint unauthenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-58644: SharePoint unauthenticated deserialization RCENew!!
CISA lists CVE-2026-58644 as exploited. TechGeeks action notice for SharePoint unauthenticated deserialization RCE, with scope, remediation, investigation guidance, and official sources.