CISA has added a high-severity Microsoft SharePoint remote code execution vulnerability (CVE-2026-45659) to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation. This flaw, stemming from deserialization of untrusted data, carries a CVSS score of 8.8. Organizations using SharePoint Server must apply the May patch immediately to prevent compromise.