CVE-2026-26106: Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-26106 PUBLISHED CVSS 8.8 HIGH

Microsoft SharePoint Server Remote Code Execution Vulnerability

Reported by microsoft · Published March 10, 2026

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
FreeType	FreeType	2.14.1, 2.13.3
Microsoft SharePoint Server Subscription Edition	Microsoft	16.0.19725.20076
Microsoft SharePoint Enterprise Server 2016	Microsoft	16.0.5543.1000
sharepoint_server	microsoft	16.0.19725.20076

CVSS 3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Vendor	Product	Versions
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0
Microsoft	Microsoft SharePoint Server 2019	16.0.0
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0
microsoft	sharepoint_server	16.0.0
Microsoft	Microsoft SharePoint Server 2019	16.0.0
microsoft	sharepoint_server_2016	16.0.0
microsoft	sharepoint_server_2019	16.0.0

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-26106
vulnetix vdb fixes CVE-2026-26106

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-26106/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart