CVE Catalog

CVE-2026-70332

CriticalCVSS 9.6
Published: Translated: NVD NIST

Summary

Server-side request forgery (SSRF) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Risk Assessment

An attacker can exploit SSRF to access internal network resources, potentially leading to data leakage or further attacks.

Recommendation

Apply security updates provided by Microsoft for SharePoint and restrict access to internal resources.

Original NVD description (English source)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS