CVE-2026-56164

Medium KEV · actively exploited PoC available

CVSS base score

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Vendor

microsoft

Product

sharepoint server

Affected

microsoft sharepoint server

Weakness

CWE-306 · Auth bypass

Published

Jul 14, 2026

Last modified

Jul 14, 2026

CVSS version

v3.1

Views

// References & exploits