CVE coverage
View on NVD →
CVE-2025-49706
CVSS 6.5
Actively exploited (KEV)
3 detections found
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Unusual Web Config File Access | production | 2026-09-18 |
| sigma | Suspicious File Write to SharePoint Layouts Directory | experimental | 2025-07-24 |
| sigma | Potential SharePoint ToolShell CVE-2025-53770 Exploitation - File Create | experimental | 2025-07-24 |