CVE-2026-58277Patch(microsoft / sharepoint_server)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft sharepoint_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sharepoint_server

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-07-15); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
sharepoint_server

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-16: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-16: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-16: 107-1507-16
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-58277 (CVSS 8.8) Microsoft SharePoint privilege escalation flaw allows authenticated attackers to elevate privileges over network. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/pZJ40DIWSe

    Post summary

    The tweet alerts that Microsoft SharePoint has a privilege‑escalation flaw (CVE‑2026‑58277) and urges immediate patching, without indicating known exploitation or PoC.

    0000036
    79 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 SharePoint admins: patch CVE-2026-58277 now—before unsupported 2016/2019 servers turn “elevation of privilege” into “who owns the farm?” Install July updates, finish config, verify builds. https://windowsforum.com/threads/cve-2026-58277-patch-sharepoint-2016-2019-before-support-ends.438831/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #PrivilegeEscalation #SharepointSecurity #MicrosoftPatches https://t.co/MFvkBmOECz

    Post summary

    The post urges SharePoint administrators to apply the CVE-2026-58277 patch before support ends, emphasizing configuration and update steps.

    0000041
    1.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftsharepoint_server2016--
Appmicrosoftsharepoint_server2019--

Explore more