Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4505 articles · 223849 vulns · 37/41 feeds (7d)
← Back to list
8.8
CVE-2026-65660PATCHED
microsoft · sharepoint_server

Microsoft SharePoint Server Remote Code Execution Vulnerability

Description

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftsharepoint_server16.0.0, 16.0.0, 16.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft sharepointmitre_affected90%
microsoftmicrosoft sharepoint server subscription editionmitre_affected90%
microsoftsharepointcert_advisory90%
microsoftexcelcert_advisory90%
microsoftmicrosoft 365 appscert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660(vendor-advisory, patch)

Related News (9 articles)

Tier D
SecurityWeek19h ago
Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
→ No new info (linked only)
Tier D
The Hacker News1d ago
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
→ No new info (linked only)
Tier D
BleepingComputer2d ago
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
→ No new info (linked only)
Tier B
CCCS Canada3d ago
AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660
→ No new info (linked only)
Tier D
The Hacker News5d ago
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
→ No new info (linked only)
Tier B
BSI Advisories46d ago
[NEU] [hoch] Microsoft Office Produkte: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR47d ago
Multiples vulnérabilités dans les produits Microsoft (12 août 2026)
→ No new info (linked only)
Tier C
VulDB47d ago
CVE-2026-65660 | Microsoft SharePoint Enterprise/SharePoint Server code injection
→ No new info (linked only)
Tier A
Microsoft MSRC47d ago
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
16.0.5565.100116.0.10417.2019816.0.19725.20522
CWECWE-94
PublishedAug 11, 2026
Last enriched47d ago
Trending Score72
Source articles9
Independent8
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 79
HIGHCVE-2026-70125
Microsoft Office Outlook Remote Code Execution Vulnerability
Trending: 33
HIGHCVE-2026-100208
Microsoft Office Outlook Remote Code Execution Vulnerability
Trending: 31
HIGHCVE-2026-66804
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Trending: 26
CRITICALCVE-2026-70352
Azure AI Language Elevation of Privilege Vulnerability
Trending: 23

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Patch Available
Sep 26, 2026