[ CVE-2026-102866 · Published 13 Oct 2026 ]

Vulnerability in Microsoft SharePoint Server Subscription Edition

CVSS 8.1 EPSS <1%3 agency advisoriesFix available

[ Description ]Official description

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

[ References ]References