// tag

SharePoint

Security incidents tagged SharePoint. Newest first.

## 8 SharePoint incidents in the last year

through Oct 22, 2026

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

Sep 25highMicrosoft SharePoint: Microsoft SharePoint Code Injection Vulnerabilitypatched
› Microsoft SharePoint patched
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Added to CISA KEV on 2026-09-25.
open incident →CVE-2026-65660

show 7 older incidents

Aug 18highMicrosoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerabilitypatched
› Microsoft SharePoint patched
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-08-18.
open incident →CVE-2026-55040

Jul 22highMicrosoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability patched
› Microsoft SharePoint patched
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-22.
open incident →CVE-2026-50522
Jul 16highMicrosoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerabilitypatched
› Microsoft SharePoint patched
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-16.
open incident →CVE-2026-58644
Jul 14highMicrosoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerabilitypatched
› Microsoft SharePoint Server patched
Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Added to CISA KEV on 2026-07-14.
open incident →CVE-2026-56164
Jul 1highMicrosoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerabilitypatched
› Microsoft SharePoint Server patched
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network. Added to CISA KEV on 2026-07-01.
open incident →CVE-2026-45659

Apr 14highMicrosoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerabilitypatched
› Microsoft SharePoint Server patched
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added to CISA KEV on 2026-04-14.
open incident →CVE-2026-32201

Mar 18highMicrosoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerabilitypatched
› Microsoft SharePoint patched
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-03-18.
open incident →CVE-2026-20963