Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 6 sources

CVE-2026-56164

KEVCVSS 10.0

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Vendor
Microsoft
Product
SharePoint Server
CVSS
10.0
EPSS
0.43 (p99)
CISA KEV
listed
Exposure class
Collaboration, Web platform, Identity, Remote access

Coverage

7

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. KEV CISA KEV

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.

    KEV Fix available CVE-2026-56164 Microsoft
  2. Ivanti advisory Ivanti

    July 2026 Patch Tuesday

    Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's…

    Exploited CVSS 10.0 Fix available CVE-2026-48282CVE-2026-48286CVE-2026-13028+8 more Ivanti Adobe
  3. CISA advisory CISA

    CISA Urges SharePoint Hardening After New Exploitations

    Update July 16, 2026 : CISA has updated this Alert to reflect the addition of CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) Catalog on July 16, 2026. CISA is aware of active exploitation of vulnerabilities…

  4. CISA advisory CISA

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability…

  5. Research ZDI

    The July 2026 Security Update Review

    Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the…

  6. Advisory MSRC

    CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  7. Research Insikt Group

    July 2026 CVE Landscape

    In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help