VDB

CVE-2026-56157

CVE-2026-56157 PUBLISHED CVSS 5.4 MEDIUM

Reported by microsoft · Published July 14, 2026

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Risk Scores

CVSS 3.1
5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 201616.0.0
MicrosoftMicrosoft SharePoint Server 201916.0.0
MicrosoftMicrosoft SharePoint Server Subscription Edition16.0.0
MicrosoftMicrosoft SharePoint Server Subscription Edition16.0.0, 16.0.0, 16.0.0
MicrosoftMicrosoft SharePoint Server 201916.0.0, 16.0.0, 16.0.0
microsoftsharepoint_server_201916.0.0, 16.0.0, 16.0.0
microsoftsharepoint_server_201616.0.0, 16.0.0, 16.0.0
microsoftsharepoint_server16.0.0, 16.0.0, 16.0.0
MicrosoftMicrosoft SharePoint Enterprise Server 201616.0.0, 16.0.0, 16.0.0

Timeline

  • Jul 14, 2026 CVE Published
  • Jul 15, 2026 Coalition ESS Score
  • Jul 15, 2026 Security Advisory
  • Jul 15, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›