CybersecurityMSPMicrosoft SharePointRemote Code ExecutionRCE
CISA: Microsoft SharePoint RCE flaw now actively exploited
July 1, 2026
Back to all postsA critical Remote Code Execution (RCE) vulnerability, known as CVE-2021-30690, has been identified in Microsoft's SharePoint software. This flaw allows an attacker to execute arbitrary code in the context of the SharePoint application pool identity, potentially enabling them to gain full control over a compromised system. The exploitation of this vulnerability is now being observed in active attacks targeting SharePoint servers globally. As Canadian businesses heavily rely on Microsoft products, including SharePoint, for their day-to-day operations, they are at risk if they have not yet applied the necessary security patch provided by Microsoft. It's crucial for IT managers to prioritize updating their SharePoint servers as soon as possible.
Source: BleepingComputer
CybersecurityMSPMicrosoft SharePointRemote Code ExecutionRCE
Concerned about this threat to your business?
We help Canadian SMBs deploy the controls discussed in this article. Free 30-minute assessment — no obligation.