2026-07-15 (Wednesday) Journal

Day summary: Today’s RSS activity: 1 item(s) from vulnerability.circl.lu including “CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)”.

Hourly activity:

hour  00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23
pulse  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  @  .
count 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

• Source: vulnerability.circl.lu
• Time: 22:30:24
• Summary: # CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED) Ref: https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/ Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft are disclosing the first vulnerability in this chain, the authentication…