NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-26106

CVSS 3.1: 8.8 high
EPSS: 1%p70
Published: Mar 10, 2026 · Mar 10, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-26106 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Vendors: microsoft

Products: sharepoint server

Weakness: CWE-20

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

2 stories

2026-004: Critical Vulnerability in SharePoint Exploited

CVE-2026-20963 (CVSS 9.8), an unauthenticated RCE in on-prem SharePoint, was added to CISA's KEV on 18 March 2026 and is actively exploited.

CERT-EU AdvisoriesMar 25, 00:00 UTC · Mar 25, 2026Exploit / PoCExploitedCVE-2026-20963 CVE-2026-26106 CVE-2026-26113+12

90

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMar 10, 22:23 UTC · Mar 10, 2026VulnerabilityCVE-2026-26110 CVE-2026-26113 CVE-2026-26144+142 · 1 read

60