CyberRota Analysis
AI-GeneratedMicrosoft SharePoint and Office are vulnerable to a critical cross-site scripting (XSS) flaw that allows unauthorized attackers to inject malicious scripts during web page generation. This vulnerability can lead to spoofing attacks, compromising user data and potentially enabling further exploitation within the network. Organizations using these products should prioritize immediate remediation to mitigate the risk of unauthorized access and data breaches.
CVE
CVE-2026-70306
Severity
CRITICAL
CVSS
9.3
EPSS
0.55%
Microsoft SharePoint Office
Original NVD Description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Related CVEs
Other vulnerabilities affecting the same vendor(s)