SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-54108

MEDIUM · CVSS 6.5 EPSS 0.78%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

Microsoft Office SharePoint is vulnerable to an external control of file name or path, enabling an authorized attacker to execute spoofing attacks over the network. This could lead to unauthorized access or manipulation of sensitive information. Organizations using SharePoint should prioritize addressing this vulnerability to mitigate potential risks to their data integrity and security.

CVE
CVE-2026-54108
Severity
MEDIUM
CVSS
6.5
EPSS
0.78%
Microsoft SharePoint Office

Original NVD Description

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH