Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
We have discovered 3,135 live websites that are affected by CVE-2026-50522.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 3,135 live websites (72% of Microsoft SharePoint install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 81 versions ( 41% of all versions) |
| 1,271 websites | |
| 172 websites | |
| 128 websites | |
| 114 websites | |
| 94 websites | |
| 88 websites | |
| 83 websites | |
| 70 websites | |
| 68 websites | |
| 68 websites |
| .com | 695 websites |
| .org | 283 websites |
| .de | 104 websites |
| .ca | 102 websites |
| .edu | 93 websites |
| .net | 84 websites |
| .es | 62 websites |
| .fr | 60 websites |
| .it | 42 websites |
| .dk | 41 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ********.****.com | *** | ||
| ***.int | *,*** | ||
| **********.dk | *,*** | ||
| ******.gov | *,*** | ||
| ****.**.gov | *,*** | ||
| ***************.org | *,*** | ||
| ***********.***.au | *,*** | ||
| ****.eu | **,*** | ||
| **********.***.es | **,*** | ||
| *********.***.es | **,*** |
FAQ