Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

Multiple critical vulnerabilities and active exploitation campaigns reported: public PoC has triggered active exploitation of SharePoint RCE CVE-2026-50522 (CVSS 9.8); Qilin ransomware affiliates are exploiting PAN-OS GlobalProtect auth-bypass CVE-2026-0257 to gain VPN access; ServiceNow pre-auth RCE CVE-2026-6875 is being exploited against self-hosted instances; and nginx heap-overflow CVE-2026-42533 can lead to crashes and potential RCE. Additional high-risk issues include a 7‑Zip XZ-handling RCE, a critical Zimbra SNMP command-injection, SonicWall SMA zero-days used to gain root on VPNs, as