CVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerability

Published Jul 8, 2025
·
Updated

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Other sources

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.

CISA

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft

Affected Software

10 affected componentsFixes available
Microsoft SharePoint Server 2019
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server<16.0.18526.20424
Microsoft SharePoint Server=2019
Microsoft SharePoint Server Subscription Edition<16.0.18526.20424
16.0.18526.20424
Microsoft SharePoint Server 2019<16.0.10417.20027
16.0.10417.20027
Microsoft SharePoint Enterprise Server 2016<16.0.5508.1000
16.0.5508.1000

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.18526.20424Patch KB5002751
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.10417.20027Patch KB5002741
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.5508.1000Patch KB5002744

Event History

Dec 4, 2023
News Published
06:01 AM
Dec 18, 2023
News Published
02:25 AM
Jan 15, 2024
News Published
03:34 PM
Apr 29, 2024
News Published
02:29 AM
May 6, 2024
News Published
02:30 AM
May 13, 2024
News Published
02:21 AM
Jun 3, 2024
News Published
12:02 PM
Jul 1, 2024
News Published
03:35 AM
Jul 22, 2024
News Published
03:44 AM
Sep 30, 2024
News Published
03:02 AM
Nov 11, 2024
News Published
03:28 AM
Feb 10, 2025
News Published
02:30 AM
Mar 3, 2025
News Published
03:31 AM
Mar 10, 2025
News Published
01:56 AM
Jul 8, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 13, 2025
News Published
11:46 PM
Jul 20, 2025
News Published
via BleepingComputer·03:40 PM
Jul 21, 2025
News Published
12:13 AM
News Published
02:05 PM
News Published
via ZDNet·02:05 PM
News Published
via Dark Reading·02:37 PM
News Published
via ZDNet·02:57 PM
News Published
via The Register·07:58 PM
News Published
via The Register·08:01 PM
Jul 22, 2025
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
News Published
via BleepingComputer·11:26 AM
News Published
via BleepingComputer·11:28 AM
News Published
via The Register·04:40 PM
Jul 23, 2025
News Published
via ZDNet·02:23 PM
News Published
via The Register·06:05 PM
Jul 24, 2025
News Published
via BleepingComputer·09:53 AM
News Published
via The Register·04:54 PM
Jul 26, 2025
News Published
via The Register·11:28 AM
Aug 4, 2025
News Published
via BleepingComputer·11:26 AM
Aug 5, 2025
News Published
via BleepingComputer·02:02 PM
Aug 7, 2025
News Published
via The Register·02:30 PM
Sep 8, 2025
News Published
via The Register·11:46 AM
Oct 22, 2025
News Published
via BleepingComputer·10:24 AM
May 12, 2026
News Published
via Dark Reading·10:20 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-49706?

CVE-2025-49706 is considered a high severity vulnerability due to improper authentication in Microsoft Office SharePoint.

2

How do I fix CVE-2025-49706?

To fix CVE-2025-49706, apply the relevant security patches provided by Microsoft for your version of SharePoint.

3

Which versions of SharePoint are affected by CVE-2025-49706?

CVE-2025-49706 affects Microsoft SharePoint Server 2019, SharePoint Enterprise Server 2016, and SharePoint Server Subscription Edition.

4

What type of attack can CVE-2025-49706 facilitate?

CVE-2025-49706 allows an authorized attacker to perform spoofing attacks over a network.

5

Is there a recommended approach to mitigate CVE-2025-49706?

The recommended approach to mitigate CVE-2025-49706 is to implement the latest updates and security patches from Microsoft.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203