
The 401 That Fooled Me - N-Day Review of CVE-2025-49706 in SharePoint
On May 16, 2025, Khoa Dinh (@_l0gg) of Viettel Cyber Security demonstrated a single-request chain from authentication bypass to remote code execution (RCE) in Microsoft SharePoint at Pwn2Own Berlin...