Share Point Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Summary: A SharePoint Server vulnerability Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to technical details published by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition, was patched in the August 11 security updates, and is scored 8.8 by the National Vulnerability Database.
What you should know: Defenders who triaged CVE-2026-65660 off Microsoft's advisory saw a moderate spoofing flaw, while the separate CVE record Microsoft publishes titles the same issue a code-execution vulnerability - and the full exploit markup is now public, with no in-the-wild exploitation reported and the flaw absent from CISA's KEV catalog.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-55040CVE-2026-65660
- Related
- CVE-2026-65660: Microsoft Share Point Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026CVE-2026-55040: Microsoft Share Point Weak Authentication Vulnerability Known Exploited Vulnerabilities · Aug 18, 2026