A critical SharePoint Server vulnerability patched in May 2026 is now being used in active ransomware campaigns. Here is what happened, who is at risk, and how to check your patch status now.