# Urgent Patching Required for SharePoint, Winsock, and VMware vCenter Vulnerabilities

*Published August 17, 2026*
*Source: [https://www.sans.org/newsletters/newsbites/xxviii-60](https://www.sans.org/newsletters/newsbites/xxviii-60)*

## Executive Summary

SANS has issued urgent warnings about critical vulnerabilities in SharePoint, Winsock, and VMware vCenter, which are being actively exploited. Organizations must apply patches immediately and review their security measures to protect against these threats.

## Article

Recent security alerts have highlighted critical vulnerabilities affecting several widely used software platforms, including SharePoint, Winsock, and VMware vCenter. SANS has issued warnings about these flaws being actively exploited, making it imperative for organizations to address them immediately. The SharePoint authentication flaw, resolved in the July Patch Tuesday update, requires special attention for on-premises SharePoint 2016 and 2019 servers. Despite the patch being released in July, if you have not yet applied it, doing so should be a top priority.

Moreover, organizations should reconsider the necessity of hosting their own SharePoint servers. If maintaining on-premises servers is unavoidable, it is crucial to implement additional layers of application security controls and ensure that these servers are not exposed directly to the Internet.

In addition to SharePoint, vulnerabilities in Winsock and VMware vCenter have also been identified as actively exploited. These issues can lead to unauthorized access and potential data breaches, posing significant risks to enterprise security. Immediate patching and enhanced security measures are necessary to safeguard against these threats.

Addressing these vulnerabilities is critical for maintaining the integrity and security of enterprise systems. Organizations must act swiftly to apply available patches and strengthen their security posture to prevent potential exploitation.