Firetruck

CVE-2026-65660

KEV
Updated Oct 30, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft SharePoint Enterprise Server 2016Microsoft / Microsoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5565.1001affected
Microsoft SharePoint Server 2019Microsoft / Microsoft SharePoint Server 2019>= 16.0.0, < 16.0.10417.20198affected
Microsoft SharePoint Server Subscription EditionMicrosoft / Microsoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.19725.20522affected