Remote code execution affecting Microsoft SharePoint Server

Microsoft SharePoint Server is a collaboration and content management platform developed by Microsoft, widely deployed in enterprise environments for document sharing, intranet site management and collaborative work. This platform is affected by a vulnerability labeled CVE-2026-26114 resulting from a lack of security checks when reading data sent to the server. Exploitation of this vulnerability would allow a malicious actor, with a simple user account, to send a trapped request in order to execute arbitrary code remotely on the affected server. It is classified high with a severity score of 8.8 according to CVSS V3.1.

• All versions of Microsoft SharePoint Enterprise Server 2016 prior to version 16.0.5543.1000;
• All versions of Microsoft SharePoint Server 2019 prior to version 16.0.10417.20102;