Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🚨 HIGH: CVE-2026-55021 (CVSS 7.3) - XSS vulnerability in Microsoft Office SharePoint allows authorized attackers to perform spoofing attacks over network. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/eAp6PIBU6h
Post summary
A high‑severity XSS vulnerability (CVE‑2026‑55021) in Microsoft Office SharePoint has been disclosed, and users are urged to apply a patch immediately.
🪟 SharePoint’s latest “feature” was authenticated XSS—because trusted users injecting malicious content into pages is apparently a workflow. July’s patch closes it, so patch before your intranet becomes an attack surface. https://windowsforum.com/threads/cve-2026-55021-fix-sharepoint-xss-with-july-2026-updates.438676/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #SharepointSecurity https://t.co/i9cQ6dhCUo
Post summary
The tweet reports an authenticated XSS vulnerability (CVE‑2026‑55021) in SharePoint that was fixed by the July update, with no evidence of active exploitation or PoC.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |