Vulnerabilities
Microsoft Office SharePoint SSRF Spoofing Vulnerability (CVE-2026-105713)
A server‑side request forgery flaw in Microsoft Office SharePoint can let an authenticated user spoof requests to adjacent networks. The issue is rated critical and affects all SharePoint deployments. Apply the latest patch and tighten network controls immediately.
What happened
Microsoft Office SharePoint contains a server‑side request forgery (SSRF) flaw that allows an authorized user to craft requests to internal or adjacent network resources, effectively spoofing traffic. The vulnerability is identified as CVE‑2026‑105713.
Impact
Authenticated users can use the flaw to reach internal services, exfiltrate data, or perform lateral movement. The flaw does not require elevated privileges beyond normal SharePoint access.
Mitigation
- Install the security update released by Microsoft for SharePoint.
- Restrict outbound network traffic from SharePoint servers to only necessary destinations.
- Enable logging and monitor for anomalous outbound requests originating from SharePoint.
What to do now
Verify that your SharePoint environment is running the latest cumulative update. Review firewall rules and consider network segmentation to isolate SharePoint from sensitive internal networks. If a patch is not yet available, apply the temporary mitigation of blocking outbound HTTP/HTTPS traffic from SharePoint servers.
Related vulnerabilities
Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-63516) Acknowledged
Microsoft has acknowledged a spoofing vulnerability in SharePoint Server (CVE-2026-63516). The issue could allow attackers to impersonate legitimate users or services. Defenders should verify if their SharePoint deployments are affected and apply any forthcoming patches or mitigations.
Read briefing
CVE-2026-69724: Remote Code Execution Vulnerability in Microsoft Office SharePoint
Microsoft Office SharePoint is affected by CVE-2026-69724, a remote code execution vulnerability. Microsoft has acknowledged the issue, but no patch has been released yet. Defenders should monitor for updates, apply patches promptly, and enforce strict access controls.
Read briefing
CVE-2026-102862: SharePoint Elevation of Privilege Vulnerability
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw (CVE‑2026‑102862) that allows an authenticated attacker to gain higher permissions on a network. The flaw affects SharePoint Server 2013/2016/2019 and SharePoint Online. Defenders should apply the latest cumulative update, audit permissions, and monitor for unauthorized privilege changes.
Read briefing
CVE-2026-105720: SharePoint Elevation of Privilege Vulnerability
A flaw in Microsoft Office SharePoint’s authorization logic lets an authenticated user gain higher privileges on the network. The issue affects all SharePoint deployments that have not applied the latest security update. Apply the patch immediately and audit user permissions.
Read briefing