Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🟠 #Microsoft SharePoint Server, Cross-Site Scripting (XSS) Spoofing, #CVE-2026-47640 (Medium) -DC-Jun2026-361 https://dailycve.com/microsoft-sharepoint-server-cross-site-scripting-xss-spoofing-cve-2026-47640-medium-dc-jun2026-361/
Post summary
A medium‑severity Cross‑Site Scripting (XSS) spoofing vulnerability (CVE‑2026‑47640) has been disclosed for Microsoft SharePoint Server, as reported by DailyCVE.
🪟 SharePoint spoofing CVE-2026-47640 is the latest “we swear it’s not your fault” patch. If your SharePoint is on-prem, Microsoft’s saying: fix it now or tickets will breed. #Windows #Microsoft #SharePoint https://windowsforum.com/threads/cve-2026-47640-sharepoint-spoofing-patch-on-prem-servers-fast.424660/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #SharepointServer #MsrcAdvisory https://t.co/yeNZQtofJi
Post summary
The tweet announces that Microsoft has released a patch for the SharePoint spoofing vulnerability CVE-2026-47640 and urges on‑prem SharePoint users to apply it promptly.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |