PT-2026-58260 · Microsoft · Sharepoint Server

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-56164

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Subscription Edition

Description A missing authentication flaw in a critical function allows an unauthorized attacker to elevate privileges over a network. This issue is being actively exploited in real-world incidents.

Recommendations Apply the security patches for Microsoft SharePoint Server 2016. Apply the security patches for Microsoft SharePoint Server 2019. Apply the security patches for Microsoft SharePoint Subscription Edition.

Fix

LPE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-56164

Affected Products

Sharepoint Server

References · 20

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56164 · Security Note
• https://twitter.com/SecAlertsCo/status/2077184007264252040 · Twitter Post
• https://twitter.com/Daily_CyberSec/status/2077198003673214982 · Twitter Post
• https://twitter.com/SecurityAr58409/status/2077198307458162959 · Twitter Post
• https://twitter.com/horizon_secured/status/2077104523693244440 · Twitter Post
• https://twitter.com/Action1corp/status/2077117058215711098 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56164 · Note
• https://twitter.com/ThreatWire_/status/2077090404701257882 · Twitter Post
• https://twitter.com/SecAlertsCo/status/2077191654155395430 · Twitter Post
• https://twitter.com/SecurityAr58409/status/2077199824751898852 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2077115231151485308 · Twitter Post
• https://twitter.com/The_Cyber_News/status/2077090185356214592 · Twitter Post
• https://t.me/EchelonEyes/4759 · Telegram Post