CVE-2026-88206
CVE-2026-88206 · Microsoft Office SharePoint Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 7.5 · High · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
microsoft sharepoint server subscription edition
- Versions
- ≥ 16.0.0, < 16.0.20326.20190: Affected (custom)
Update to 16.0.20326.20190