CVE-2026-26114 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-26105

CVE-2026-26105 : A cross-site scripting vulnerability in Microsoft SharePoint (Office SharePoint) arises from improper input neutralization during web page generation, enabling an attacker to spoof over a network. Connected sources corroborate spoofing/impersonation risk for SharePoint Server. Im...

The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction

You can't control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder's Head of Security digs into why this happens and how teams can manage ...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

CVE-2026-20951

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

CVE-2026-20958 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2026-20958

CVE-2026-20958 is a Microsoft SharePoint SSRF information-disclosure vulnerability. Affected product: Microsoft Office SharePoint (on-premises SharePoint Server/Subscription Edition). Description in sources: SSRF in SharePoint could permit an authorized attacker to disclose information over a net...

CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-20963

CVE-2026-20963 is a Microsoft SharePoint vulnerability described as deserialization of untrusted data (CWE-502) that enables a network-based code execution attack. The current description states an unauthenticated attacker can execute code over the network. Vendor discussions note a CVSSv3.1 vect...

CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-20951

CVE-2026-20951 is a Microsoft SharePoint Server Remote Code Execution vulnerability caused by improper input validation in SharePoint. The issue allows an unauthenticated or authenticated attacker to execute code locally on affected SharePoint Server deployments. Documented affected products incl...

CVE-2026-20951 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

PT-2026-2757

CVE-2026-20958 Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. https://t.co/27qwZPmRNM...

CVE-2025-64672 Microsoft SharePoint Server Spoofing Vulnerability

...