exploit/windows/http/sharepoint_toolpane_rce

weaponized

Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)

view exploit source metasploittype exploitpublished 2025-07-08catalog metasploit

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-53771US	—	99.9% (100th)	Exploit	2025-07-20
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53770US	—OT critical	100.0% (100th)	KEV	2025-07-20
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for…
CVE-2025-49706US	—OT critical	99.1% (100th)	KEV	2025-07-08
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49704US	—OT critical	100.0% (100th)	KEV	2025-07-08
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.