{"schema":"vulnpedia.research/1","cve":"CVE-2026-63520","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520","tags":["vendor-advisory","patch","Patch","Vendor Advisory"],"source":"mitre","sourceId":"microsoft","modified":"2026-10-21T20:51:06.621Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2026-10-21T20:51:06.621Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"},{"source":"nvd","sourceId":"CVE-2026-63520","modified":"2026-08-13T13:38:30.453","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"}]},{"source":"euvd","sourceId":"EUVD-2026-56298","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56298","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-56298","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56298"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://x.com/DefusedCyber/status/2092228764323217723","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","url":"https://x.com/DefusedCyber/status/2092228764323217723"}]},{"url":"https://previdian.com/CVE-2026-63520","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","url":"https://previdian.com/CVE-2026-63520"}]},{"url":"https://vulncheck.com/xdb/150b499f1604","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"150b499f1604","modified":"2026-08-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"150b499f1604","modified":"2026-08-25T00:00:00Z","url":"https://vulncheck.com/xdb/150b499f1604"}]},{"url":"https://github.com/hypnguyen1209/CVE-2026-63520","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"150b499f1604","modified":"2026-08-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"150b499f1604","modified":"2026-08-25T00:00:00Z","url":"https://github.com/hypnguyen1209/CVE-2026-63520"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/hypnguyen1209/CVE-2026-63520","source":"poc-in-github","sourceId":"CVE-2026-63520","description":"POC pre-auth RCE on Sharepoint chain","modified":"2026-08-28T14:01:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63520","url":"https://github.com/hypnguyen1209/CVE-2026-63520"},{"source":"poc-in-github","sourceId":"CVE-2026-63520","modified":"2026-08-28T14:01:39Z","url":"https://github.com/hypnguyen1209/CVE-2026-63520"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"150b499f1604","url":"https://vulncheck.com/xdb/150b499f1604","cve":"CVE-2026-63520","dateAdded":"2026-08-26T20:59:24Z","modified":"2026-08-25T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/hypnguyen1209/CVE-2026-63520","observations":[{"dateAdded":"2026-08-26T20:59:24Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"150b499f1604","modified":"2026-08-25T00:00:00Z","url":"https://vulncheck.com/xdb/150b499f1604"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-25T00:00:00Z","modified":"2026-08-25T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Microsoft","product":"SharePoint","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","modified":"2026-08-25T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/DefusedCyber/status/2092228764323217723","dateAdded":"2026-08-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","url":"https://x.com/DefusedCyber/status/2092228764323217723"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-63520","dateAdded":"2026-08-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-63520","url":"https://previdian.com/CVE-2026-63520"}]}]}