SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-22 11:17 UTC
  • Importiert: 2026-09-28 11:52 UTC
  • CVSS: 8.8
  • Quelle-ID: thn_global
  • uid_hash: 3c064119fc24ec93332aeddea1771539fac846a7dbd298f6c27bf488dd9ce368
The Hacker News

Inhalt

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa.

The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-65660

HIGH

8.8

HIGH

8.8

2026-08-11

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste