CVE-2026-26114

HIGH WAF: Medium
CVSS 8.8 Published: 2026-03-10
CWE-502

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

WAF Coverage Analysis

Insecure Deserialization Medium WAF Coverage

OWASP: A08:2021 Software and Data Integrity Failures

944xxx - Java Attack

Affected Software

VendorProductVersion
microsoftsharepoint_server2016
microsoftsharepoint_server2019

References

Back to CVE Database