CVE-2026-20958

MEDIUM WAF: Medium
CVSS 5.4 Published: 2026-01-13
CWE-918

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

WAF Coverage Analysis

Server-Side Request Forgery (SSRF) Medium WAF Coverage

OWASP: A10:2021 SSRF

934xxx - Node.js / Generic Injection

Affected Software

VendorProductVersion
microsoftsharepoint_serverup to 16.0.19127.20442
microsoftsharepoint_server2016
microsoftsharepoint_server2019

References

Back to CVE Database