Microsoft Patched This SharePoint Bug in May. CISA Gave Agencies 3 Days to Fix It in July. Here’s the Gap That Matters.

CVE-2026-45659 was patched months before CISA flagged it as actively exploited — the real story isn't the vulnerability, it's the gap between a patch existing and it actually getting installed.