CVE Catalog

CVE-2026-70326

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

45th percentile - higher than 45% of all known CVEs

Summary

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An authorized attacker can use the server to make requests to internal resources, potentially leading to privilege escalation and access to sensitive data.

Recommendation

Update Microsoft Office SharePoint to the latest version containing the security fix.

Original NVD description (English source)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS