| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Known vulnerabilities affecting Sharepoint products and systems
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-70355 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.7 |
| 640 |
| Neutral |
| No |
| Yes |
| CVE-2026-70332 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 9.6 | 706 | Neutral | No | Yes |
| CVE-2026-70326 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70324 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70321 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70306 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 9.3 | 676 | Neutral | No | Yes |
| CVE-2026-69904 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 3.5 | 217 | Neutral | No | Yes |
| CVE-2026-69804 | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 7.5 | 379 | Neutral | No | Yes |
| CVE-2026-69724 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-69716 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-69690 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 223 | Neutral | No | Yes |
| CVE-2026-69683 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 7.7 | 545 | Neutral | No | Yes |
| CVE-2026-69636 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 6.5 | 338 | Neutral | No | Yes |
| CVE-2026-69615 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 4.8 | 202 | Neutral | No | Yes |
| CVE-2026-69465 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-69464 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-69417 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 223 | Neutral | No | Yes |
| CVE-2026-69409 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 6.5 | 209 | Neutral | No | Yes |
| CVE-2026-69402 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 223 | Neutral | No | Yes |
| CVE-2026-69282 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 587 | Neutral | No | Yes |