CVE-2026-105719
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Oct 13, 2026 · updated Oct 14, 2026 · Microsoft Microsoft SharePoint Server Subscription Edition
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Oct 14, 2026 · NIST NVD
Updated
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Affected
- cpe microsoft/sharepoint serverversion unspecified
- vendor Microsoft Microsoft SharePoint Server Subscription Editionversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-105719
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-105719
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-105719
30-day exploitation probability 1.0%
first.org - NIST NVDVulnerability recordCVE-2026-105719
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
nvd.nist.gov