CVE-2026-55040

CRITICAL9.1Published on July 14, 2026

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

CVSS score9.1 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness type (CWE)CWE-1390

Vendorsmicrosoft

Affected products

Vendors	Prodotto	Versioni
microsoft	sharepoint server	< 16.0.19725.20434

SharePoint, catena di exploit fino all’RCE senza autenticazione

Vulnerabilities

SharePoint Exploit Chain Enables Unauthenticated RCE

Critical SharePoint vulnerabilities CVE-2026-55040 and CVE-2026-63520 allow unauthenticated remote code execution via an exploit chain, affecting SharePoint Server 2019, 2016, and Subscription Edition.

Aug 12, 20263 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

SharePoint Exploit Chain Enables Unauthenticated RCE