CVE record · 4 sources
CVE-2026-55040
KEVCVSS 7.0Microsoft SharePoint Weak Authentication Vulnerability
- Vendor
- Microsoft
- Product
- SharePoint
- CVSS
- 7.0
- EPSS
- 0.039 (p90)
- CISA KEV
- listed
- Exposure class
- Collaboration, Browser, Operating system, Hypervisor
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.
-
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…
-
CISA Urges SharePoint Hardening After New Exploitations
Update July 16, 2026 : CISA has updated this Alert to reflect the addition of CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) Catalog on July 16, 2026. CISA is aware of active exploitation of vulnerabilities…
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free…
-
August 2026 CVE Landscape
In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.