CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  • Published Jul 14, 2026
  • CVSS 9.8 critical
  • 1.0% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog

Affected software

In the news

CVE-2026-56164 at the National Vulnerability Database