CVE-2026-85932

CVE-2026-85932 · Microsoft Office SharePoint Information Disclosure Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVSS 6.5 · Medium · EPSS 1.0% · Fix available

Published

2026-10-13T19:01:13.689Z

Updated

2026-10-23T22:30:05.867Z

Check your server →