CVE-2026-62826 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62826

CVE-2026-62826 affects Microsoft SharePoint Server where improper neutralization of input during web page generation enables an authorized attacker to spoof over a network. The NVD entry (CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N, base score 4.6) confirms cross-site scripting vulnerability wi...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical." Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild. CVE-2026-5615...

CVE-2026-58644

creationtimestamp| type| source ---|---|--- 2026-07-14 19:00:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237 2026-07-14 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyyci4sl2v 2026-07-14 22:02:05+00:00| seen|...

CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-56157

Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...

CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55135

CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...

CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability

...

CVE-2026-55040

CVE-2026-55040 is a SharePoint Server vulnerability described as a security feature bypass caused by weak authentication. The affected products mentioned in the connected documents are SharePoint Server Subscription Edition, as well as SharePoint Server 2019 and 2016. Patch guidance is present in...

CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability

...

CVE-2026-55126

CVE-2026-55126 concerns Microsoft Office SharePoint (SharePoint Server) with an XSS flaw described as improper neutralization of input during web page generation, enabling an authorized attacker to perform spoofing over a network. The CVSS 3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N, ba...

CVE-2026-55051 Microsoft SharePoint Server Information Disclosure Vulnerability

...

CVE-2026-55051

CVE-2026-55051 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker to disclose information over a network. The CVE is documented with CVSS v3.1 base score 6.5 (MEDIUM), network attack vector, low attack complexity, privileges req...

CVE-2026-55126 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55126 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55034

CVE-2026-55034 affects Microsoft Office SharePoint (SharePoint Server) and is triggered by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 7.3 (HIGH): network attack vector, low attack complexity, pri...