CVE-2026-50522 is a critical SharePoint deserialization vulnerability that is now being actively exploited. This article examines the vulnerability in depth, including the exploitation workflow, affected versions, machine-key theft for persistent access, patch analysis, indicators of compromise, and practical mitigation guidance for defenders.