Firetruck

CVE-2026-55040

KEV
Updated Nov 1, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft SharePoint Enterprise Server 2016Microsoft / Microsoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5561.1001affected
Microsoft SharePoint Server 2019Microsoft / Microsoft SharePoint Server 2019>= 16.0.0, < 16.0.10417.20175affected
Microsoft SharePoint Server Subscription EditionMicrosoft / Microsoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.19725.20434affected