THE BASE COLLECTIONCRDS / 0.1

CVE-2025-53771MEDIUM

SharePoint

initial accessT1190 T1078

The same SharePoint authentication weakness, still reachable after the first round of updates, letting an unauthorized attacker present themselves as another party.

CVSS

6.5

EPSS

100%

PATCH

Vendor

Apply the follow-up SharePoint update; the earlier one did not fully close this.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

mediumREV. 01

CVE-2025-53771SharePoint — Authentication Flaw Left Open by the First Fix

The same SharePoint authentication weakness, still reachable after the first round of updates, letting an unauthorized attacker present themselves as another party.

YOUR NEXT MOVE

Apply the follow-up SharePoint update; the earlier one did not fully close this.

Read the risk

THE VITAL STATS

CVSS score: 6.5/ 10
EPSS probability: 100%
Attack complexity: Low
Known exploited: Not listed
CVE published: 2025-07-20
Exploit published: Not recorded
Confidence: high
Kill chain: initial access
MITRE ATT&CK: T1190, T1078
Severity: medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attacker needsNetwork access to the farm

Behind the card

2 REFERENCES

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-08-07	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-08-07	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-08-07	claude-code	high

Printing history

THE RECORD

r12026-09-20Initial base card

First printing. This card has not been reprinted since publication.