Zero Day Watch CVE-2025-53770 Turns SharePoint into a Pivot Point

A high-impact zero-day vulnerability, tracked as CVE-2025-53770, is actively being exploited in the wild, targeting on-premises Microsoft SharePoint Servers. This newly uncovered flaw enables attackers to sidestep existing security patches and gain unauthorized access to critical systems. With three China-backed threat actors exploiting these weaknesses, organizations operating internet-facing SharePoint environments are strongly advised to assume compromise and take immediate action through proactive containment and thorough remediation efforts.