CVE-2026-108452
CVE-2026-108452 · Microsoft Office SharePoint Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 0.6% · Fix available
- Published
- Updated
Affected products and versions
microsoft sharepoint server subscription edition
- Versions
- ≥ 16.0.0, < 16.0.20326.20190: Affected (custom)
Update to 16.0.20326.20190