CVE-2026-69273: Microsoft Office SharePoint Remote Code Execution Vulnerability
Published Sep 8, 2026
·Updated
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Other sources
Microsoft Office SharePoint Remote Code Execution Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft SharePoint Server Subscription Edition<16.0.20326.20082
16.0.20326.20082
Microsoft SharePoint Server<16.0.20326.20082
Remediation
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:13 PM
Data Sourced
via MITRE·05:13 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must already be authorized in SharePoint. No user interaction is required, and exploitation can be performed over the network.
2
What is the potential impact if exploitation succeeds?
Successful exploitation can allow remote code execution. The reported impact includes high confidentiality, integrity, and availability effects.
3
Is this vulnerability known to be actively exploited?
The provided exploit maturity rating is E:U, indicating exploit code is unproven or unknown in the supplied data.