Weeraryahanno ayaa bilaabay inay ka faa’iideystaan daldalool amni oo halis ah oo laga helay Microsoft SharePoint, kaddib markii shirkadda amniga internetka ee Rapid7 ay daabacday tijaabo muujinaysa sida looga faa’iideysan karo. Daldaloolkan ayaa qof aan hore xuquuq u lahayn u oggolaan kara inuu iska dhigo isticmaale ama maamule barta SharePoint. Daldaloolkan, oo loo diiwaangeliyey CVE-2026-55040, ayaa ku jira habka xaqiijinta JWT token. Microsoft ayaa cilladda ku saxday casriyeyntii Patch Tuesday ee July 2026, iyadoo macaamiisha kula talisay inay cusboonaysiiyaan SharePoint Enterprise Server 2016 iyo SharePoint Server 2019. Microsoft ayaa sheegtay in weeraryahanku heli karo faylal isla markaana wax ka beddeli karo xogta, balse aanu carqaladayn karin helitaanka nidaamka. Stephen Fewer, oo ah cilmi-baare amniga internetka uga shaqeeya Rapid7, ayaa Talaadadii daabacay warbixin farsamo oo faahfaahsan iyo tijaabada PoC ee daldaloolkan. Shirkadda sirdoonka khataraha internetka ee Defused ayaa markii dambe sheegtay in koodhka tijaabada ah ee Rapid7 loo adeegsaday weerarro lagu bartilmaameedsaday nidaamyadeeda SharePoint ee dabinnada ah. “Weeraryahannadu waxay hadda tijaabada @rapid7 ee CVE-2026-55040 u adeegsanayaan SharePoint honeypots-kayaga,” ayay shirkaddu sheegtay. The Blue Report 2026 ayaa cabbiraysa difaacyada farsamo kasta, iyadoo adeegsanaysa 338 milyan oo tijaabo oo laga sameeyey nidaamyada ay macaamiishu adeegsadaan. Hay’adda Shadowserver ayaa hadda la socota in ka badan 8,500 oo server oo Microsoft SharePoint ah oo internetka u furan. Lama oga inta ka mid ah ee ah nidaamyo dabin ah ama horay loo cusboonaysiiyey. Microsoft ayaa daldaloolkan ku tilmaantay bartilmaameed soo jiidan kara weeraryahannada, balse weli si rasmi ah uguma calaamadayn mid si guul leh looga faa’iideystay nidaamyo dhab ah. Hay’adda Amniga Internetka iyo Kaabayaasha Mareykanka ee CISA ayaa 15-kii July kooxaha difaaca shabakadaha uga digtay weerarro suurtagal ah oo la xiriira CVE-2026-55040. Waxay kula talisay inaan server-yada SharePoint si toos ah internetka loogu furin haddii aanay lagama maarmaan ahayn, isla markaana dib loo eego hagaha Microsoft ee adkaynta amniga SharePoint Server. CISA ayaa sidoo kale ku talisay in server-yada internetka u furan la dhigo gadaasha Layer 7 reverse proxy ama difaac kale oo heerka barnaamijka ah. Waxay ku baaqday in gelitaanka dibadda laga xiro SharePoint Central Administration, xiriirka u dhexeeya server farm-yada iyo keydadka xogtana lagu koobo nidaamyada loo baahan yahay. Tan iyo November 2021, CISA ayaa diiwaangelisay 14 daldalool oo Microsoft SharePoint ah oo si firfircoon looga faa’iideystay, siddeed ka mid ahna waxaa loo adeegsaday weerarrada madax-furashada. Talaadadii, hay’addu waxay xaqiijisay in daldalool kale oo SharePoint ah oo lagu fulin karo koodh meel fog, CVE-2026-45659, ay kooxaha madax-furashadu hadda ka faa’iideysanayaan. Hay’adaha Soomaaliya ee adeegsada noocyadan SharePoint waa inay hubiyaan in casriyeynta July 2026 la rakibay, server-yada internetka u furanna lagu dabaqay xaddidaadaha ay CISA ku talisay.