# Newly exploited vulnerabilities: week of 29 June to 5 July 2026 (week 27)

Source: https://junglewise.ai/threats/exploited/2026-06-29  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-06-29.json  
License: CC BY 4.0 with a link back

In the week of 29 June to 5 July 2026, 2 vulnerabilities were newly recorded as exploited in the wild, 2 of them critical. The technology hit most was Microsoft SharePoint (1), followed by Microsoft SharePoint Enterprise Server 2016 (1) and Microsoft SharePoint Server 2019 (1).

## Newly exploited this week

- [CVE-2026-45659: Microsoft Office SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-45659-microsoft-office-sharepoint-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 8.8, exploited since 1 Jul 2026, published 22 May 2026)
- [CVE-2026-48558: SimpleHelp authentication bypass in OIDC authentication flow](https://junglewise.ai/threats/cve-2026-48558-simplehelp-authentication-bypass-in-oidc-authentication-flow) (critical, exploited in the wild, CVSS 10, exploited since 29 Jun 2026, published 12 Jun 2026)

## Technologies hit most

1. [Microsoft SharePoint](https://junglewise.ai/threats/technologies/sharepoint): 1 vulnerability
2. [Microsoft SharePoint Enterprise Server 2016](https://junglewise.ai/threats/technologies/sharepoint-enterprise-server-2016): 1 vulnerability
3. [Microsoft SharePoint Server 2019](https://junglewise.ai/threats/technologies/sharepoint-server-2019): 1 vulnerability
4. [Microsoft SharePoint Server Subscription Edition](https://junglewise.ai/threats/technologies/sharepoint-server-subscription-edition): 1 vulnerability
5. [Microsoft Sharepoint-Server](https://junglewise.ai/threats/technologies/sharepoint-server): 1 vulnerability
6. [Simplehelp](https://junglewise.ai/threats/technologies/simplehelp): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 29 June to 5 July 2026 (week 27)", https://junglewise.ai/threats/exploited/2026-06-29, 2 October 2026.