CVE-2026-85932(microsoft / sharepoint_server)

LOWCVSS 6.5 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

microsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sharepoint_server

Affected systems

Vendors

microsoft

Products

sharepoint_server

Deep dive

Full discourse1 post

VulniPulse@vulnipulse23h
CVE advisory: CVE-2026-85932 - microsoft: Microsoft Office SharePoint Information Disclosure Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-85932 #CVE #CyberSecurity #Microsoft #SharePoint
1000039
32 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	sharepoint_server	-	-	-

Explore more

Back to dashboard microsoft CVEs sharepoint_server vulnerabilities