Skip to content

CVE

CVE-2026-63520

8.1
CVSS 3.1
1
story
Severity
8.1 High · vendor score
Published
Aug 11, 2026
Weakness
CWE-20

What it is

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesUnauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.DENNIS FISHER · 2 MIN

Official references

3 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record

Advisories, fixes & analysis

Fixmsrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520