Threat intel / CVE tracker

CVE-2026-65660

Medium KEV · actively exploited PoC available
CVSS base score
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor
microsoft
Product
sharepoint server
Affected
microsoft sharepoint server
Weakness
CWE-94 · Code injection
Published
Aug 11, 2026
Last modified
Aug 13, 2026
CVSS version
v3.1
Views
0
// References & exploits
NVD record Search PoCs