Skip to content
Vulnerability intelligence

CVE-2025-53771: SharePoint vulnerability

A ToolShell intrusion consistent with Storm-2603's methods shows that a patch does not tell you if intruders were already inside.

2025
What WebPulse reported · 1 analysis
Kaspersky: SharePoint intruders kept their tunnel in memory, not on disk

A ToolShell intrusion consistent with Storm-2603's methods shows that a patch does not tell you if intruders were already inside.

November 7, 2026
View CVE-2025-53771 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2025-3248 CVE-2025-8671 CVE-2025-8088 CVE-2025-68788 CVE-2025-67644 CVE-2025-66208 CVE-2025-66035 CVE-2025-66032