CVE-2026-26105Disclosure(microsoft / sharepoint_server)

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

microsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26105

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sharepoint_server

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked at 2 mentions on most recent observed day (2026-03-16)
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

sharepoint_server

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-10	1	Disclosure1
2026-03-14	1	General1
2026-03-16	2	Disclosure1General1

Full discourse4 posts

CVE@CVEnew208d
Disclosure
CVE-2026-26105 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofin… https://www.cve.org/CVERecord?id=CVE-2026-26105
Post summary
A brief notice identifies CVE-2026-26105 as a cross‑site scripting flaw in Microsoft SharePoint, but provides no exploit, patch, or evidence of active use.
01000234
56.7K followersView on X
Aakash Rahsi@rahsi_aaka208d
General
CVE-2026-26105 | Microsoft SharePoint Server Spoofing Vulnerability https://www.aakashrahsi.online/post/cve-2026-26105 https://t.co/JXUHcsiPx8
Post summary
The provided text only lists the CVE name and links to a blog post, without offering detailed information on the vulnerability or its exploitation.
0000048
2 followersView on X
DailyCVE@dailycve209d
General
🔴 #Microsoft Office SharePoint, Cross-site Scripting (XSS), #CVE-2026-26105 (HIGH) https://dailycve.com/microsoft-office-sharepoint-cross-site-scripting-xss-cve-2026-26105-high/
Post summary
The tweet announces a high‑severity cross‑site scripting vulnerability in Microsoft Office SharePoint (CVE‑2026‑26105) but provides no further technical depth, proof‑of‑concept, exploitation, or mitigation details.
0000037
168 followersView on X
The Hacker Wire@TheHackerWire213d
Disclosure
🟠 CVE-2026-26105 - High Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. https://www.thehackerwire.com/vulnerability/CVE-2026-26105/ https://t.co/MlLf4xr5RB
Post summary
The post announces CVE‑2026‑26105, a high‑severity cross‑site scripting flaw in Microsoft SharePoint that can enable spoofing attacks, but it does not provide any PoC, exploit code, or evidence of active exploitation.
0000033
133 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	sharepoint_server	-	-	-
App	microsoft	sharepoint_server	2016	-	-
App	microsoft	sharepoint_server	2019	-	-

Explore more

Back to dashboard microsoft CVEs sharepoint_server vulnerabilities

What researchers are saying

CVE-2026-26105

CVE@CVEnewDisclosure

A brief notice identifies CVE-2026-26105 as a cross‑site scripting flaw in Microsoft SharePoint, but provides no exploit, patch, or evidence of active use.

Aakash Rahsi@rahsi_aakaGeneral

The provided text only lists the CVE name and links to a blog post, without offering detailed information on the vulnerability or its exploitation.

DailyCVE@dailycveGeneral

The tweet announces a high‑severity cross‑site scripting vulnerability in Microsoft Office SharePoint (CVE‑2026‑26105) but provides no further technical depth, proof‑of‑concept, exploitation, or mitigation details.

The Hacker Wire@TheHackerWireDisclosure

The post announces CVE‑2026‑26105, a high‑severity cross‑site scripting flaw in Microsoft SharePoint that can enable spoofing attacks, but it does not provide any PoC, exploit code, or evidence of active exploitation.