SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69402

HIGH · CVSS 7.3 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Microsoft Office SharePoint is vulnerable due to improper input neutralization during web page generation, leading to a cross-site scripting (XSS) flaw. This vulnerability allows an authorized attacker to execute spoofing attacks over the network, potentially compromising user data and trust. Organizations using affected Microsoft products should prioritize immediate remediation to mitigate the risk of exploitation.

CVE
CVE-2026-69402
Severity
HIGH
CVSS
7.3
EPSS
0.41%
Microsoft SharePoint Office

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)