TI-2026-73369 Aliases CVE-2026-105713 GHSA-w2r8-6259-qr8m

Server-side request forgery in Microsoft Office SharePoint

LOW 26CWE-918Published 2026-10-13 · Updated 2026-10-31

Key facts

Attack vector: Adjacent network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Microsoft SharePoint Server Subscription Edition from 16.0.0 before 16.0.20326.20190 is affected. A server-side request forgery flaw (CWE-918) lets the server send requests to destinations it should not reach, and an authorized attacker with low privileges on an adjacent network can use it to perform spoofing.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00418 36th percentileScored 2026-11-07

Fix Fixed Microsoft SharePoint Server Subscription Edition (Microsoft): 16.0.20326.20190

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0 to before 16.0.20326.20190	16.0.20326.20190	Patch available	CNA

Microsoft SharePoint Server Subscription Edition VendorMicrosoft Affected 16.0.0 to before 16.0.20326.20190 Fixed in 16.0.20326.20190 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:microsoft:sharepoint_server:::::subscription:::*	before 16.0.20326.20190	Vulnerable	Microsoft

cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* Versions before 16.0.20326.20190 Vulnerable ·Microsoft

Remediation

Upgrade Microsoft SharePoint Server Subscription Edition to 16.0.20326.20190 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Fix · CNA Microsoft SharePoint Server Subscription Edition (Microsoft) Fixed in 16.0.20326.20190

Timeline

2026-10-13 Threatist record created from CVE-2026-105713
2026-10-13 CISA SSVC decision points changed
2026-10-13 Priority changed: MEDIUM → LOW
2026-10-13 Alias added: GHSA-w2r8-6259-qr8m

References

Patch 1

Microsoft Office SharePoint Spoofing Vulnerability

TI-2026-42212 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-37256 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-16982 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2025-33671 Microsoft SharePoint Server Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2023-13749 Microsoft SharePoint Server Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2019-00394 Improper input validation in Microsoft SharePoint Server KEVCVSS 3.1CRITICAL 9.8

See all 631 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences