OCTOBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-108452

HIGH · CVSS 8.8 EPSS 0.63%

Source: NVD + CISA KEV + EPSS · Published 2026-10-15 · Last synced 2026-10-20

CyberRota Analysis

AI-Generated

Microsoft Office SharePoint is vulnerable due to a path traversal flaw that improperly limits access to restricted directories, enabling authorized attackers to execute arbitrary code remotely. This high-severity vulnerability (CVSS 8.8) poses significant risks to organizations using SharePoint, as it could lead to unauthorized control over affected systems. Organizations utilizing these Microsoft products should prioritize patching to mitigate potential exploitation.

CVE
CVE-2026-108452
Severity
HIGH
CVSS
8.8
EPSS
0.63%
Microsoft SharePoint Office

Original NVD Description

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)