CVE-2026-56164

🗓️ 14 Jul 2026 17:05:12Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 656 Views🌐 WEB

CVE-2026-56164: missing authentication in Microsoft Office SharePoint enables privilege escalation.

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for Missing Authentication for Critical Function in Microsoft	6 Aug 202613:30	–	githubexploit
ATTACKERKB	CVE-2026-56164	14 Jul 202617:05	–	attackerkb
Information Security Automation	August "In the Trend of VM" (#30): vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint	17 Aug 202615:00	–	avleonov
Information Security Automation	About Elevation of Privilege - Microsoft SharePoint (CVE-2026-56164) vulnerability.	7 Aug 202613:00	–	avleonov
Information Security Automation	July Microsoft Patch Tuesday	26 Jul 202620:00	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.	15 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-56164	14 Jul 202618:00	–	circl
CISA KEV Catalog	Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability	14 Jul 202600:00	–	cisa_kev
Cvelist	CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability	14 Jul 202617:05	–	cvelist
EUVD	EUVD-2026-44043	14 Jul 202618:32	–	euvd

NVD

Vulners

CNA

Node

microsoft sharepoint_serverRange<16.0.19725.20434subscription

microsoft sharepoint_serverMatch2016enterprise

microsoft sharepoint_serverMatch2019

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5561.1001",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10417.20175",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.19725.20434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
X-RequestDigest	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-SharePoint-Authenticated	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-SP-RequestRights	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-SP-RequestRights2	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
SPHomeBearerHint	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-RequestForceAuthentication	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-SP-Proxy	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-Forwarded-For	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
X-Original-URL	header	_vti_bin/client.svc/ProcessQuery	Authentication bypass via missing digest with bypass routing headers leading to elevated farm admin session.	CWE-306
SOAP payload	request body	_vti_bin/SharePointAdmin.asmx	Command execution via SOAP endpoint after authentication bypass/elevation.	CWE-306

09 Sep 2026 19:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.3 - 9.8

EPSS0.26636

SSVC