MSRXVulnerabilities / CVE-2026-88208
CVE-2026-88208
Published 2026-10-13 · published (not yet in NVD)
CVE-2026-88208
Microsoft Office SharePoint Spoofing Vulnerability
4.6 MEDIUM
CVSS 3.1 · CNA
CVSS 3.1 · CNA
0.3%
chance of exploitation in the next 30 days (EPSS; higher than 19% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 19% of CVEs)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Affected products
- Microsoft Microsoft SharePoint Server Subscription Edition: 16.0.0 to < 16.0.20326.20190
Weakness: CWE-79
1 references (advisories, patches, write-ups)
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208 · vendor-advisory, patch
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.