๐Ÿ” CVE Alert

CVE-2026-56157

MEDIUM 5.4

Microsoft SharePoint Server Spoofing Vulnerability

CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor microsoft
Product microsoft sharepoint enterprise server 2016
Ecosystems
Industries
TechnologyEnterprise
Published Jul 14, 2026
Last Updated Jul 15, 2026
Stay Ahead of the Next One

Get instant alerts for microsoft microsoft sharepoint enterprise server 2016

Be the first to know when new medium vulnerabilities affecting microsoft microsoft sharepoint enterprise server 2016 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / Microsoft SharePoint Enterprise Server 2016
16.0.0 < 16.0.5561.1001
Microsoft / Microsoft SharePoint Server 2019
16.0.0 < 16.0.10417.20175
Microsoft / Microsoft SharePoint Server Subscription Edition
16.0.0 < 16.0.19725.20434

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157