{"schema":"vulnpedia.research/1","cve":"CVE-2025-49704","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704","tags":["vendor-advisory","patch","Vendor Advisory"],"source":"mitre","sourceId":"microsoft","modified":"2026-02-13T19:07:40.974Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2026-02-13T19:07:40.974Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704"},{"source":"nvd","sourceId":"CVE-2025-49704","modified":"2026-06-17T09:31:46.077","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704"}]},{"url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/","tags":["vendor-advisory","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:45:23.028Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:45:23.028Z","url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/"},{"source":"nvd","sourceId":"CVE-2025-49704","modified":"2026-06-17T09:31:46.077","url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:45:23.028Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:45:23.028Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704"},{"source":"nvd","sourceId":"CVE-2025-49704","modified":"2026-06-17T09:31:46.077","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704"}]},{"source":"euvd","sourceId":"EUVD-2025-20554","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20554","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-20554","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20554"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://research.eye.security/sharepoint-under-siege/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://research.eye.security/sharepoint-under-siege/"}]},{"url":"https://x.com/Unit42_Intel/status/1946654044316905883","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://x.com/Unit42_Intel/status/1946654044316905883"}]},{"url":"https://unit42.paloaltonetworks.com/microsoft-sharepoint-cve-2025-49704-cve-2025-49706-cve-2025-53770/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://unit42.paloaltonetworks.com/microsoft-sharepoint-cve-2025-49704-cve-2025-49706-cve-2025-53770/"}]},{"url":"https://www.sentinelone.com/blog/sharepoint-toolshell-zero-day-exploited-in-the-wild-targets-enterprise-servers/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.sentinelone.com/blog/sharepoint-toolshell-zero-day-exploited-in-the-wild-targets-enterprise-servers/"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/microsoft-sharepoint-zero-day","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/microsoft-sharepoint-zero-day"}]},{"url":"https://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilities","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilities"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/in-the-wild-exploitation-of-cve-2025-53770-and-cve-2025-53771-technical-details-and-mitigation-strategies/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/in-the-wild-exploitation-of-cve-2025-53770-and-cve-2025-53771-technical-details-and-mitigation-strategies/"}]},{"url":"https://www.welivesecurity.com/en/eset-research/toolshell-an-all-you-can-eat-buffet-for-threat-actors/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.welivesecurity.com/en/eset-research/toolshell-an-all-you-can-eat-buffet-for-threat-actors/"}]},{"url":"https://www.fortinet.com/blog/threat-research/inside-the-toolshell-campaign","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.fortinet.com/blog/threat-research/inside-the-toolshell-campaign"}]},{"url":"https://www.splunk.com/en_us/blog/security/sharepoint-exploits-and-the-hidden-threat-of-iis-module-persistence.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.splunk.com/en_us/blog/security/sharepoint-exploits-and-the-hidden-threat-of-iis-module-persistence.html"}]},{"url":"https://mp.weixin.qq.com/s/h6_ijQAHhq4tersaBE5fXQ","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://mp.weixin.qq.com/s/h6_ijQAHhq4tersaBE5fXQ"}]},{"url":"https://research.checkpoint.com/2025/before-toolshell-exploring-storm-2603s-previous-ransomware-operations/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://research.checkpoint.com/2025/before-toolshell-exploring-storm-2603s-previous-ransomware-operations/"}]},{"url":"https://falconfeeds.io/blogs/echoes-of-the-exploit-old-vulnerabilities-threat-actor-campaigns","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://falconfeeds.io/blogs/echoes-of-the-exploit-old-vulnerabilities-threat-actor-campaigns"}]},{"url":"https://www.blackfog.com/warlock-ransomware-blackfog-in-action/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.blackfog.com/warlock-ransomware-blackfog-in-action/"}]},{"url":"https://unit42.paloaltonetworks.com/ak47-activity-linked-to-sharepoint-vulnerabilities/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://unit42.paloaltonetworks.com/ak47-activity-linked-to-sharepoint-vulnerabilities/"}]},{"url":"https://viz.greynoise.io/tags/microsoft-sharepoint-toolshell-auth-bypass-deserialization-rce-cve-2025-49704-attempt?days=1","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://viz.greynoise.io/tags/microsoft-sharepoint-toolshell-auth-bypass-deserialization-rce-cve-2025-49704-attempt?days=1"}]},{"url":"https://www.bleepingcomputer.com/news/security/the-heat-wasnt-just-outside-cyber-attacks-spiked-in-summer-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.bleepingcomputer.com/news/security/the-heat-wasnt-just-outside-cyber-attacks-spiked-in-summer-2025/"}]},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/echoes-in-the-shell-legacy-tooling-behind-ongoing-sharepoint-toolshell-exploitation/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/echoes-in-the-shell-legacy-tooling-behind-ongoing-sharepoint-toolshell-exploitation/"}]},{"url":"https://www.cisa.gov/news-events/analysis-reports/ar25-218a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.cisa.gov/news-events/analysis-reports/ar25-218a"}]},{"url":"https://www.cisa.gov/sites/default/files/2025-08/MAR-251132.c1.v1.CLEAR_.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/2025-08/MAR-251132.c1.v1.CLEAR_.pdf"}]},{"url":"https://8813571.fs1.hubspotusercontent-na1.net/hubfs/8813571/PERISCOPE_VULNINTEL_20250812.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://8813571.fs1.hubspotusercontent-na1.net/hubfs/8813571/PERISCOPE_VULNINTEL_20250812.pdf"}]},{"url":"https://cyble.com/blog/ransomware-groups-july-2025-attacks/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://cyble.com/blog/ransomware-groups-july-2025-attacks/"}]},{"url":"https://www.attackiq.com/2025/08/27/emulating-warlock-ransomware/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.attackiq.com/2025/08/27/emulating-warlock-ransomware/"}]},{"url":"https://news.sophos.com/en-us/2025/09/17/gold-salems-warlock-operation-joins-busy-ransomware-landscape/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://news.sophos.com/en-us/2025/09/17/gold-salems-warlock-operation-joins-busy-ransomware-landscape/"}]},{"url":"https://www.sophos.com/en-us/blog/gold-salems-warlock-operation-joins-busy-ransomware-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.sophos.com/en-us/blog/gold-salems-warlock-operation-joins-busy-ransomware-landscape"}]},{"url":"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/storm-2603-targeting-sharepoint-vulnerabilities-and-critical-infrastructure-worldwide","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/storm-2603-targeting-sharepoint-vulnerabilities-and-critical-infrastructure-worldwide"}]},{"url":"https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-17","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-17"}]},{"url":"https://blog.talosintelligence.com/ir-trends-q3-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://blog.talosintelligence.com/ir-trends-q3-2025/"}]},{"url":"https://insights.nccgroup.com/reveiew-of-q3-2025-threat-intelligence-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://insights.nccgroup.com/reveiew-of-q3-2025-threat-intelligence-report"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-31","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-31"}]},{"url":"https://www.rapid7.com/cdn/assets/bltbd2f1cd70f9e3e7f/691360b9c91291146f1a5308/threat-landscape-report-q3-2025.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.rapid7.com/cdn/assets/bltbd2f1cd70f9e3e7f/691360b9c91291146f1a5308/threat-landscape-report-q3-2025.pdf"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-11-14","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-11-14"}]},{"url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/"}]},{"url":"https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/"}]},{"url":"https://www.huntress.com/blog/velociraptor-misuse-part-two-eye-of-the-storm","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.huntress.com/blog/velociraptor-misuse-part-two-eye-of-the-storm"}]},{"url":"https://research.checkpoint.com/2025/ink-dragons-relay-network-and-offensive-operation/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://research.checkpoint.com/2025/ink-dragons-relay-network-and-offensive-operation/"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-01-03","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-01-03"}]},{"url":"https://blog.polyswarm.io/polyswarms-2025-year-in-review","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://blog.polyswarm.io/polyswarms-2025-year-in-review"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"url":"https://medium.com/@nshcthreatrecon/vulnerability-exploitation-landscape-2025-trends-and-2026-outlook-6e375cfc8861","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/vulnerability-exploitation-landscape-2025-trends-and-2026-outlook-6e375cfc8861"}]},{"url":"https://www.checkpoint.com/security-report/?flz-category=items&flz-item=report-cyber-security-report-2026","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.checkpoint.com/security-report/?flz-category=items&flz-item=report-cyber-security-report-2026"}]},{"url":"https://b9866c47-b467-4bc0-b154-6afa06da0ab5.usrfiles.com/ugd/b9866c_2578eb8c8ffe4257b30efef3ad0f953e.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://b9866c47-b467-4bc0-b154-6afa06da0ab5.usrfiles.com/ugd/b9866c_2578eb8c8ffe4257b30efef3ad0f953e.pdf"}]},{"url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf"}]},{"url":"https://slcyber.io/whitepapers-reports/the-ransomware-landscape-in-h2-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://slcyber.io/whitepapers-reports/the-ransomware-landscape-in-h2-2025"}]},{"url":"https://resources.dataminr.com/runtime/content/tev0mnMKQzuJTxST","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://resources.dataminr.com/runtime/content/tev0mnMKQzuJTxST"}]},{"url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report"}]},{"url":"https://insights.nccgroup.com/annual-threat-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://insights.nccgroup.com/annual-threat-intelligence-report-2025"}]},{"url":"https://medium.com/@nshcthreatrecon/2025-global-cyber-threat-landscape-dd0da508b433","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/2025-global-cyber-threat-landscape-dd0da508b433"}]},{"url":"https://images.global.fortinet.com/Web/FortinetInc2/%7B4e3646cf-fdb5-4c17-8bca-4f506f5731e0%7D_Outbreak_Alerts_-_Annual_Report_2025_FINAL.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://images.global.fortinet.com/Web/FortinetInc2/%7B4e3646cf-fdb5-4c17-8bca-4f506f5731e0%7D_Outbreak_Alerts_-_Annual_Report_2025_FINAL.pdf"}]},{"url":"https://medium.com/s2wlab-threat-intelligence/ransomware-landscape-in-h2-2025-statistics-and-key-issues-079ebd4fbbfa","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://medium.com/s2wlab-threat-intelligence/ransomware-landscape-in-h2-2025-statistics-and-key-issues-079ebd4fbbfa"}]},{"url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2026-CTI-002.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2026-CTI-002.pdf"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-03-14","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-03-14"}]},{"url":"https://www.rapid7.com/blog/post/tr-accelerating-attack-cycle-2026-global-threat-landscape-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.rapid7.com/blog/post/tr-accelerating-attack-cycle-2026-global-threat-landscape-report/"}]},{"url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-04","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-04"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-30","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-30"}]},{"url":"https://www.fortinet.com/resources/reports/threat-landscape-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.fortinet.com/resources/reports/threat-landscape-report"}]},{"url":"https://www.fortinet.com/library/soc-dgt/global-threat-landscape-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.fortinet.com/library/soc-dgt/global-threat-landscape-report"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-09","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-09"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-11","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-11"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-15","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-15"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-18","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-18"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-21","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-21"}]},{"url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-22","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-22"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-24","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-24"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-25","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-25"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-28","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-28"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-30","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-30"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-01","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-01"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-05","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-05"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-04","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-04"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-12","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-12"}]},{"url":"https://medium.com/s2wblog/ransomware-landscape-in-h1-2026-statistics-and-key-issues-f15683e233cd","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://medium.com/s2wblog/ransomware-landscape-in-h1-2026-statistics-and-key-issues-f15683e233cd"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-28","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-28"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-29","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-29"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-30","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-30"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-01","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-01"}]},{"url":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/2026-Microsoft-Digital-Defense-Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/2026-Microsoft-Digital-Defense-Report.pdf"}]},{"url":"https://www.security.com/threat-intelligence/warlock-ransomware-critical-infrastructure","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://www.security.com/threat-intelligence/warlock-ransomware-critical-infrastructure"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-02","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-02"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-07","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-07"}]},{"url":"https://blog.polyswarm.io/china-linked-warlock-ransomware-campaign-targets-critical-infrastructure","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://blog.polyswarm.io/china-linked-warlock-ransomware-campaign-targets-critical-infrastructure"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-22","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-22"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-23","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-23"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-25","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-25"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb","source":"metasploit","sourceId":"exploit/windows/http/sharepoint_toolpane_rce","description":"Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)","modified":"2026-06-02 10:32:30 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/windows/http/sharepoint_toolpane_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb"},{"source":"metasploit","sourceId":"exploit/windows/http/sharepoint_toolpane_rce","modified":"2026-06-02 10:32:30 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb"}],"tags":[]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2025-07-18T00:00:00Z","modified":"2025-07-18T00:00:00Z","requiredAction":"Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","knownRansomwareCampaignUse":"Known","reportedByVulncheckCanaries":true,"vendorProject":"Microsoft","product":"SharePoint","dueDate":"2025-07-23T00:00:00Z","cisaDateAdded":"2025-07-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","modified":"2025-07-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://research.eye.security/sharepoint-under-siege/","dateAdded":"2025-07-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://research.eye.security/sharepoint-under-siege/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/Unit42_Intel/status/1946654044316905883","dateAdded":"2025-07-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://x.com/Unit42_Intel/status/1946654044316905883"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://unit42.paloaltonetworks.com/microsoft-sharepoint-cve-2025-49704-cve-2025-49706-cve-2025-53770/","dateAdded":"2025-07-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://unit42.paloaltonetworks.com/microsoft-sharepoint-cve-2025-49704-cve-2025-49706-cve-2025-53770/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.sentinelone.com/blog/sharepoint-toolshell-zero-day-exploited-in-the-wild-targets-enterprise-servers/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/microsoft-sharepoint-zero-day","dateAdded":"2025-07-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://fortiguard.fortinet.com/outbreak-alert/microsoft-sharepoint-zero-day"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilities"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/in-the-wild-exploitation-of-cve-2025-53770-and-cve-2025-53771-technical-details-and-mitigation-strategies/","dateAdded":"2025-07-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/in-the-wild-exploitation-of-cve-2025-53770-and-cve-2025-53771-technical-details-and-mitigation-strategies/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.welivesecurity.com/en/eset-research/toolshell-an-all-you-can-eat-buffet-for-threat-actors/","dateAdded":"2025-07-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.welivesecurity.com/en/eset-research/toolshell-an-all-you-can-eat-buffet-for-threat-actors/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.fortinet.com/blog/threat-research/inside-the-toolshell-campaign","dateAdded":"2025-07-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.fortinet.com/blog/threat-research/inside-the-toolshell-campaign"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.splunk.com/en_us/blog/security/sharepoint-exploits-and-the-hidden-threat-of-iis-module-persistence.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://mp.weixin.qq.com/s/h6_ijQAHhq4tersaBE5fXQ","dateAdded":"2025-07-30T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://mp.weixin.qq.com/s/h6_ijQAHhq4tersaBE5fXQ"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://research.checkpoint.com/2025/before-toolshell-exploring-storm-2603s-previous-ransomware-operations/","dateAdded":"2025-07-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://research.checkpoint.com/2025/before-toolshell-exploring-storm-2603s-previous-ransomware-operations/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://falconfeeds.io/blogs/echoes-of-the-exploit-old-vulnerabilities-threat-actor-campaigns","dateAdded":"2025-08-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://falconfeeds.io/blogs/echoes-of-the-exploit-old-vulnerabilities-threat-actor-campaigns"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.blackfog.com/warlock-ransomware-blackfog-in-action/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://unit42.paloaltonetworks.com/ak47-activity-linked-to-sharepoint-vulnerabilities/","dateAdded":"2025-08-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://unit42.paloaltonetworks.com/ak47-activity-linked-to-sharepoint-vulnerabilities/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://viz.greynoise.io/tags/microsoft-sharepoint-toolshell-auth-bypass-deserialization-rce-cve-2025-49704-attempt?days=1"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.bleepingcomputer.com/news/security/the-heat-wasnt-just-outside-cyber-attacks-spiked-in-summer-2025/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/echoes-in-the-shell-legacy-tooling-behind-ongoing-sharepoint-toolshell-exploitation/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/analysis-reports/ar25-218a","dateAdded":"2025-08-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.cisa.gov/news-events/analysis-reports/ar25-218a"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.cisa.gov/sites/default/files/2025-08/MAR-251132.c1.v1.CLEAR_.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://8813571.fs1.hubspotusercontent-na1.net/hubfs/8813571/PERISCOPE_VULNINTEL_20250812.pdf","dateAdded":"2025-08-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://8813571.fs1.hubspotusercontent-na1.net/hubfs/8813571/PERISCOPE_VULNINTEL_20250812.pdf"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://cyble.com/blog/ransomware-groups-july-2025-attacks/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.attackiq.com/2025/08/27/emulating-warlock-ransomware/","dateAdded":"2025-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.attackiq.com/2025/08/27/emulating-warlock-ransomware/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://news.sophos.com/en-us/2025/09/17/gold-salems-warlock-operation-joins-busy-ransomware-landscape/","dateAdded":"2025-09-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://news.sophos.com/en-us/2025/09/17/gold-salems-warlock-operation-joins-busy-ransomware-landscape/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.sophos.com/en-us/blog/gold-salems-warlock-operation-joins-busy-ransomware-landscape"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/storm-2603-targeting-sharepoint-vulnerabilities-and-critical-infrastructure-worldwide"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/","dateAdded":"2025-09-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-17","dateAdded":"2025-10-17T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-17"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/ir-trends-q3-2025/","dateAdded":"2025-10-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://blog.talosintelligence.com/ir-trends-q3-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://insights.nccgroup.com/reveiew-of-q3-2025-threat-intelligence-report","dateAdded":"2025-10-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://insights.nccgroup.com/reveiew-of-q3-2025-threat-intelligence-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-31","dateAdded":"2025-10-31T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-10-31"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.rapid7.com/cdn/assets/bltbd2f1cd70f9e3e7f/691360b9c91291146f1a5308/threat-landscape-report-q3-2025.pdf","dateAdded":"2025-11-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.rapid7.com/cdn/assets/bltbd2f1cd70f9e3e7f/691360b9c91291146f1a5308/threat-landscape-report-q3-2025.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-11-14","dateAdded":"2025-11-14T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2025-11-14"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/","dateAdded":"2025-12-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/","dateAdded":"2025-12-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.huntress.com/blog/velociraptor-misuse-part-two-eye-of-the-storm"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://research.checkpoint.com/2025/ink-dragons-relay-network-and-offensive-operation/","dateAdded":"2025-12-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://research.checkpoint.com/2025/ink-dragons-relay-network-and-offensive-operation/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-01-03","dateAdded":"2026-01-03T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-01-03"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.polyswarm.io/polyswarms-2025-year-in-review","dateAdded":"2026-01-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://blog.polyswarm.io/polyswarms-2025-year-in-review"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/vulnerability-exploitation-landscape-2025-trends-and-2026-outlook-6e375cfc8861","dateAdded":"2026-01-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://medium.com/@nshcthreatrecon/vulnerability-exploitation-landscape-2025-trends-and-2026-outlook-6e375cfc8861"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.checkpoint.com/security-report/?flz-category=items&flz-item=report-cyber-security-report-2026","dateAdded":"2026-01-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.checkpoint.com/security-report/?flz-category=items&flz-item=report-cyber-security-report-2026"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://b9866c47-b467-4bc0-b154-6afa06da0ab5.usrfiles.com/ugd/b9866c_2578eb8c8ffe4257b30efef3ad0f953e.pdf","dateAdded":"2026-02-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://b9866c47-b467-4bc0-b154-6afa06da0ab5.usrfiles.com/ugd/b9866c_2578eb8c8ffe4257b30efef3ad0f953e.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf","dateAdded":"2026-02-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://slcyber.io/whitepapers-reports/the-ransomware-landscape-in-h2-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://resources.dataminr.com/runtime/content/tev0mnMKQzuJTxST","dateAdded":"2026-02-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://resources.dataminr.com/runtime/content/tev0mnMKQzuJTxST"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report","dateAdded":"2026-02-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://insights.nccgroup.com/annual-threat-intelligence-report-2025","dateAdded":"2026-03-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://insights.nccgroup.com/annual-threat-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/2025-global-cyber-threat-landscape-dd0da508b433","dateAdded":"2026-03-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://medium.com/@nshcthreatrecon/2025-global-cyber-threat-landscape-dd0da508b433"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://images.global.fortinet.com/Web/FortinetInc2/%7B4e3646cf-fdb5-4c17-8bca-4f506f5731e0%7D_Outbreak_Alerts_-_Annual_Report_2025_FINAL.pdf","dateAdded":"2026-03-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://images.global.fortinet.com/Web/FortinetInc2/%7B4e3646cf-fdb5-4c17-8bca-4f506f5731e0%7D_Outbreak_Alerts_-_Annual_Report_2025_FINAL.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/s2wlab-threat-intelligence/ransomware-landscape-in-h2-2025-statistics-and-key-issues-079ebd4fbbfa","dateAdded":"2026-03-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://medium.com/s2wlab-threat-intelligence/ransomware-landscape-in-h2-2025-statistics-and-key-issues-079ebd4fbbfa"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2026-CTI-002.pdf","dateAdded":"2026-03-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2026-CTI-002.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-03-14","dateAdded":"2026-03-14T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-03-14"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.rapid7.com/blog/post/tr-accelerating-attack-cycle-2026-global-threat-landscape-report/","dateAdded":"2026-03-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.rapid7.com/blog/post/tr-accelerating-attack-cycle-2026-global-threat-landscape-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf","dateAdded":"2026-03-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-04","dateAdded":"2026-04-04T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-04"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-30","dateAdded":"2026-04-30T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-04-30"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.fortinet.com/resources/reports/threat-landscape-report","dateAdded":"2026-05-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.fortinet.com/resources/reports/threat-landscape-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.fortinet.com/library/soc-dgt/global-threat-landscape-report","dateAdded":"2026-05-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.fortinet.com/library/soc-dgt/global-threat-landscape-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-09","dateAdded":"2026-06-09T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-09"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-11","dateAdded":"2026-06-11T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-11"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-15","dateAdded":"2026-06-15T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-15"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-18","dateAdded":"2026-06-18T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-18"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-21","dateAdded":"2026-06-21T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-06-21"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","dateAdded":"2026-07-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-22","dateAdded":"2026-07-22T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-22"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-24","dateAdded":"2026-07-24T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-24"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-25","dateAdded":"2026-07-25T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-25"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-28","dateAdded":"2026-07-28T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-28"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-30","dateAdded":"2026-07-30T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-07-30"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-01","dateAdded":"2026-08-01T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-01"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-05","dateAdded":"2026-08-05T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-08-05"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-04","dateAdded":"2026-09-04T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-04"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-12","dateAdded":"2026-09-12T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-12"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/s2wblog/ransomware-landscape-in-h1-2026-statistics-and-key-issues-f15683e233cd","dateAdded":"2026-09-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://medium.com/s2wblog/ransomware-landscape-in-h1-2026-statistics-and-key-issues-f15683e233cd"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-28","dateAdded":"2026-09-28T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-28"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-29","dateAdded":"2026-09-29T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-29"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-30","dateAdded":"2026-09-30T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-09-30"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-01","dateAdded":"2026-10-01T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-01"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/2026-Microsoft-Digital-Defense-Report.pdf","dateAdded":"2026-10-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/2026-Microsoft-Digital-Defense-Report.pdf"},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://www.security.com/threat-intelligence/warlock-ransomware-critical-infrastructure"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-02","dateAdded":"2026-10-02T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-02"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-07","dateAdded":"2026-10-07T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-07"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.polyswarm.io/china-linked-warlock-ransomware-campaign-targets-critical-infrastructure","dateAdded":"2026-10-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://blog.polyswarm.io/china-linked-warlock-ransomware-campaign-targets-critical-infrastructure"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-22","dateAdded":"2026-10-22T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-22"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-23","dateAdded":"2026-10-23T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-23"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-25","dateAdded":"2026-10-25T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-49704","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-49704&date=2026-10-25"}]}]}