SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-62826

MEDIUM · CVSS 4.6 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-07-16 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

Microsoft SharePoint and Office are vulnerable to a cross-site scripting (XSS) flaw that allows authorized attackers to inject malicious scripts, potentially leading to spoofing attacks over the network. This vulnerability could compromise user sessions and sensitive data, making it critical for organizations using these products to prioritize patching and mitigation efforts. Users with administrative access or those managing SharePoint environments should take immediate action to address this issue.

CVE
CVE-2026-62826
Severity
MEDIUM
CVSS
4.6
EPSS
0.33%
Microsoft SharePoint Office

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)