CVE-2026-69465: Microsoft Office SharePoint Remote Code Execution Vulnerability
Published Sep 8, 2026
·Updated
Microsoft Office SharePoint Remote Code Execution Vulnerability
Other sources
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft SharePoint Server Subscription Edition<16.0.20326.20074
16.0.20326.20074
Microsoft SharePoint Server<16.0.20326.20074
Remediation
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:17 PM
Data Sourced
via MITRE·05:17 PM
DescriptionSeverity
Data Sourced
via NVD·06:19 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker must be authorized to access the affected Microsoft SharePoint Server Subscription Edition instance. Exploitation can be performed over the network and does not require user interaction.
2
What level of impact could successful exploitation have?
Successful exploitation can allow remote code execution. The provided severity metrics indicate high impact to confidentiality, integrity, and availability.
3
Are unauthenticated or default deployments affected?
The available information identifies an authorized attacker as the required privilege level. It does not state whether unauthenticated access or any particular default configuration is affected.