News SharePoint Unauthenticated RCE: The Business Connectivity Services Trap A new SharePoint exploit chain pairs CVE-2026-63520 with an auth bypass for unauthenticated RCE. Patch your on-prem servers immediately.