Vulnerabilities / CVE-2026-88209

CVE-2026-88209

Published 2026-10-13 · Analyzed

CVE-2026-88209

Microsoft Office SharePoint Spoofing Vulnerability

4.6 MEDIUM
CVSS 3.1 · CNA · microsoft.com

0.4%
chance of exploitation in the next 30 days (EPSS; higher than 30% of CVEs)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Scores

4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NCNA · microsoft.com

4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:CCNA

Affected products

microsoft sharepoint server: < 16.0.20326.20190

Weakness: CWE-79

1 references (advisories, patches, write-ups)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209 · Patch, Vendor Advisory

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website