CVE-2026-47294Disclosure(microsoft / sharepoint_server)

LOWCVSS 8.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft sharepoint_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47294

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sharepoint_server

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

sharepoint_server

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Full discourse2 posts

إبراهيم بوحيمد | Ibrahim Buhaimed@buhaimedi136d
Disclosure
معقوله يمر اسبوع بدون ثغره جديده في احد منتجات مايكروسفت؟ طبعا لا😆 هالمره الثغره في SharePoint CVE-2026-47294 | 🔴 HIGH 8.0 📋 ثغرة deserialization في Microsoft Office SharePoint تسمح لمهاجم مصرح له بتنفيذ كود عبر الشبكة. حسب CVSS v3 يشترط تفاعل الضحيه + صلاحيه وصول للمهاجم https://t.co/5vNa85TRMY
Post summary
The tweet announces the newly disclosed CVE-2026-47294, a high‑severity deserialization flaw in Microsoft Office SharePoint that permits remote code execution, requiring victim interaction and attacker privileges.
0212487.0K
50.0K followersView on X
CCB Alert@CCBalert136d
Patch
Warning: #Microsoft patched a new vulnerability (CVE-2026-47294; CVSS: 8) in #SharePoint Enterprise Server 2016. The vulnerability allows an authorised attacker to execute code over a network. Time to #Patch #Patch #Patch
Post summary
Microsoft has patched CVE-2026-47294, a high‑severity code‑execution flaw in SharePoint Enterprise Server 2016, and users are urged to apply the patch immediately.
04000235
7.2K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	sharepoint_server	-	-	-
App	microsoft	sharepoint_server	2016	-	-
App	microsoft	sharepoint_server	2019	-	-

Explore more

Back to dashboard microsoft CVEs sharepoint_server vulnerabilities