CVE-2026-65660
KEV High · CVSS 8.8- CVSS
- 8.8
- nvd
- EPSS
- —
- KEV
- Listed
- 2026-09-25
- Class
- other
- CWE-94
Description
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
References
Status: profiled · ingested 2026-09-25T18:00:19.000Z