CVE-2025-53770: “ToolShell” RCE Hits On-Prem SharePoint Servers Summary A critical remote code execution vulnerability—CVE‑2025‑53770—has emerged, targeting on-premises Microsoft SharePoint. Discovered as part of an attack