This critical code injection vulnerability in Microsoft SharePoint is currently being actively exploited in the wild, posing a severe risk of total system compromise.

The flaw is an improper control of generation of code (CWE-94), which allows an authenticated attacker with network access to trigger code injection and achieve remote code execution.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code on the underlying server, leading to a complete loss of confidentiality, integrity, and availability. Given the CVSS score of 9.5 and the confirmed active exploitation in the wild, this poses an existential threat to organizational data and service continuity.

Immediate Action: Apply the vendor-supplied security updates for the specific SharePoint version in use as documented in the Microsoft Security Response Center update guide.

Proactive Monitoring: Monitor server logs for unusual process execution, unexpected network connections, or unauthorized attempts to access sensitive SharePoint configuration files.

Compensating Controls: Deploy Web Application Firewall rules to detect and block common code injection patterns and restrict access to the SharePoint management interface to trusted internal IP addresses only.

Public Exploit Available: Yes, multiple public proofs-of-concept are available via GitHub repositories.

The extreme severity of this vulnerability, combined with confirmed active exploitation, necessitates immediate patching. Security teams should prioritize the deployment of the provided Microsoft updates across all affected SharePoint environments to prevent unauthorized access and potential system takeover.