← Back

CVE-2026-55040

nvd nist
Published: Jul 14, 2026Modified: Jul 15, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: secure@microsoft.com (Secondary)

Description

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Affected (3)

Microsoft
1 product
Sharepoint Server
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Sharepoint Server
Before 16.0.19725.20434
Sharepoint Server
Version 2016
Sharepoint Server
Version 2019

Related CWEs

CWE-1390
Weak Authentication
The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

References (1)

Source: secure@microsoft.com
PatchVendor Advisory

Timeline

No history available yet.