CVE-2026-47298General(microsoft / sharepoint_server)

LOWCVSS 8.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft sharepoint_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298

Weakness type (CWE)

CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sharepoint_server

Threat summary

Patch or workaround signal is available
5 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
General: 3 classified signals
Disclosure: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-07-14)
5 total mentions across 4 days

Affected systems

Vendors

microsoft

Products

sharepoint_server

2 versions affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification3 categories

General

360.0%

Patch

120.0%

Disclosure

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	1	Patch1
2026-06-10	1	General1
2026-06-11	1	General1
2026-07-14	2	Disclosure1General1

Full discourse5 posts

Chumy@rm_rf_chumy102d
General
This is the auth by pass which I chain with Flow2Shell CVE-2026-47298 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298 CVE-2026-55040 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040 Look it dup with @stephenfewer and @_l0gg
Post summary
The tweet links two MSRC CVEs, notes an authentication bypass and references Flow2Shell, but offers no PoC, exploit code, patch, or evidence of active exploitation.
011076407.0K
484 followersView on X
Chumy@rm_rf_chumy135d
General
Sharepoint Flow2Shell https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298
Post summary
The post simply references Microsoft’s advisory URL for CVE‑2026‑47298 titled "Sharepoint Flow2Shell" without providing additional context, evidence of exploitation, patches, or technical details.
15037102.8K
468 followersView on X
Rıdvan Yağlı@ridvanyagli102d
Disclosure
🔴 Bir güvenlik araştırmacısı CVE-2026-55040 (Authentication Bypass) açığını Flow2Shell (CVE-2026-47298) ile zincirlediğini açıkladı. CVE-2026-55040 -> Authentication Bypass https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040 CVE-2026-47298 -> Flow2Shell https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298
Post summary
A researcher disclosed a chain linking CVE-2026-55040 (Authentication Bypass) with Flow2Shell (CVE-2026-47298) and provided links to Microsoft update guides for each CVE.
00001241
1.2K followersView on X
kawn@kawn2020136d
General
#windowsupdate #microsoft つづき・CVE-2026-47298　8　　Microsoft Office SharePoint ・CVE-2026-47634　7.3　Microsoft Office SharePoint ・CVE-2026-49160　7.5　HTTP/2 －対象外：5 件・CVE-2026-42824　6.5　M365 Copilot ・CVE-2026-45497　7.7　Microsoft Copilot つづく…
Post summary
The tweet lists several new CVEs with associated CVSS scores but provides no details on exploitation, PoC, patching, or mitigation.
10000102
85 followersView on X
WindowsForum@windowsforum137d
Patch
🪟 Microsoft published a SharePoint Server RCE (CVE-2026-47298) and I can already hear the workflows squealing. “Operationally awkward” is code for: patch fast, pray hard. https://windowsforum.com/threads/cve-2026-47298-microsoft-sharepoint-rce-patch-june-9-2026-workflow-prereqs.424364/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RemoteCodeExecution #SharepointServer #PatchTuesday #Cve202647298 https://t.co/AC4IoKaxEi
Post summary
Microsoft has announced a SharePoint Server RCE vulnerability (CVE‑2026‑47298); the post emphasizes that a patch is urgently required.
0000036
1.2K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	sharepoint_server	-	-	-
App	microsoft	sharepoint_server	2016	-	-
App	microsoft	sharepoint_server	2019	-	-

Explore more

Back to dashboard microsoft CVEs sharepoint_server vulnerabilities

What researchers are saying

CVE-2026-47298

Rıdvan Yağlı[verified]@ridvanyagliDisclosure

A researcher disclosed a chain linking CVE-2026-55040 (Authentication Bypass) with Flow2Shell (CVE-2026-47298) and provided links to Microsoft update guides for each CVE.

WindowsForum[verified]@windowsforumPatch

Microsoft has announced a SharePoint Server RCE vulnerability (CVE‑2026‑47298); the post emphasizes that a patch is urgently required.

Chumy@rm_rf_chumyGeneral

The tweet links two MSRC CVEs, notes an authentication bypass and references Flow2Shell, but offers no PoC, exploit code, patch, or evidence of active exploitation.

Chumy@rm_rf_chumyGeneral

The post simply references Microsoft’s advisory URL for CVE‑2026‑47298 titled "Sharepoint Flow2Shell" without providing additional context, evidence of exploitation, patches, or technical details.

kawn@kawn2020General

The tweet lists several new CVEs with associated CVSS scores but provides no details on exploitation, PoC, patching, or mitigation.