SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-69615

LOW · CVSS 3.5 EPSS 0.40%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

Microsoft Office SharePoint is vulnerable to cross-site scripting due to improper input neutralization during web page generation, allowing authorized attackers to execute spoofing attacks over the network. While the severity is rated low, organizations using SharePoint should prioritize patching this vulnerability to mitigate potential risks associated with unauthorized actions and data exposure. Users with administrative access should be particularly vigilant in applying updates to safeguard against exploitation.

CVE
CVE-2026-69615
Severity
LOW
CVSS
3.5
EPSS
0.40%
Microsoft SharePoint Office

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)