CVE-2021-26420(microsoft / sharepoint_enterprise_server)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Microsoft SharePoint Server Remote Code Execution Vulnerability

0.0/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sharepoint_enterprise_server
  • sharepoint_foundation
  • sharepoint_server

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
sharepoint_enterprise_serversharepoint_foundationsharepoint_server

3 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-15: 110-15
Referenced assets1 URL
Full discourse1 post
  • ET Labs@ET_Labs

    49 new OPEN, 61 new PRO (49 + 12) Adobe Commerce Checkout (CVE-2022-24086), Advantech (CVE-2023-3983, CVE-2023-5642, CVE-2025-52694), DeviceCode PhishKit, Microsoft Windows SharePoint (CVE-2021-26420), TA402, TA569, TryNodeRAT, UNK_CashGrab https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-15-v11312/3481

    03020267
    5.7K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftsharepoint_enterprise_server2016--
Appmicrosoftsharepoint_foundation2013--
Appmicrosoftsharepoint_server2019--

Explore more