CISA Warns of Active Attacks on SharePoint, Zimbra

The Cybersecurity and Infrastructure Security Agency (CISA) warns of increasing threats as it expands its Known Exploited Vulnerabilities Catalog. Notably, it now includes new vulnerabilities affecting Microsoft SharePoint and Zimbra. These high-risk vulnerabilities, identified as CVE-2026-0953, CVE-2026-20131, CVE-2026-20963, CVE-2025-66376, and CVE-2023-33010, have attracted active exploitation attempts.

Organizations utilizing these platforms should prioritize patching and safeguarding their systems to mitigate potential threats. The latest additions to this catalog highlight the evolving nature of cyber threats and underscore the necessity for employing proactive cybersecurity measures.

CISA emphasizes the potential consequences of these exploits being weaponized, urging all users to stay vigilant. Maintaining updated systems and robust security practices remains crucial for minimizing risks associated with these vulnerabilities.

For further details on protecting your systems and understanding the full scope of these vulnerabilities, read the official news article.

Exploited in the Wild: CISA Warns of Active Attacks on Microsoft SharePoint and Zimbra