Input validation error in Microsoft SharePoint Server - CVE-2026-96044
Published: October 14, 2026
Vulnerability identifier: #VU155407
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-96044
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges to SharePoint administrator.
The vulnerability exists due to an unspecified weakness in Microsoft Office SharePoint when accessing the server over a network. A remote user can execute code remotely on the SharePoint server to escalate privileges to SharePoint administrator.
Exploitation requires access to the domain. The Preview Pane is not an attack vector.
Affected software
Microsoft SharePoint Server
How to mitigate CVE-2026-96044
Install security update from vendor's website.
Microsoft SharePoint Server - update to 16.0.20326.20190