CVE-2026-69273: Microsoft Office SharePoint Remote Code Execution Vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker must already be authorized in SharePoint. No user interaction is required, and exploitation can be performed over the network.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation can allow remote code execution. The reported impact includes high confidentiality, integrity, and availability effects.

Q: Is this vulnerability known to be actively exploited?

The provided exploit maturity rating is E:U, indicating exploit code is unproven or unknown in the supplied data.

Published Sep 8, 2026

Updated

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Other sources

Microsoft Office SharePoint Remote Code Execution Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft SharePoint Server Subscription Edition<16.0.20326.20082

16.0.20326.20082

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20082Patch KB5002908

Event History

Sep 8, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Updated

via Microsoft·02:00 PM

Description

CVE Published

via MITRE·05:13 PM

Data Sourced

via MITRE·05:13 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already be authorized in SharePoint. No user interaction is required, and exploitation can be performed over the network.

What is the potential impact if exploitation succeeds?

Successful exploitation can allow remote code execution. The reported impact includes high confidentiality, integrity, and availability effects.

Is this vulnerability known to be actively exploited?

The provided exploit maturity rating is E:U, indicating exploit code is unproven or unknown in the supplied data.

CVE-2026-69273: Microsoft Office SharePoint Remote Code Execution Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is this vulnerability known to be actively exploited?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is this vulnerability known to be actively exploited?