SharePoint is bleeding. 85+ servers breached

SharePoint is bleeding. 85+ servers breached CVE‑2025‑53770 gives attackers full control with webshells and stolen keys. Attackers can bypass authentication entirely by manipulating HTTP headers. specifically, setting the Referer header to - /_layouts/SignOut.aspx - /_layouts/15/ToolPane.asp The vulnerability affects all on-premises SharePoint Server deployments: SharePoint Server 2016 – No patch available SharePoint Server 2019 – No patch available SharePoint Server Subscription Edition – Security update available