CVE-2026-69683: Microsoft Office SharePoint Information Disclosure Vulnerability
Published Sep 8, 2026
·Updated
Microsoft Office SharePoint Information Disclosure Vulnerability
Other sources
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft SharePoint
Microsoft SharePoint Server Subscription Edition<16.0.20326.20082
16.0.20326.20082
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20082Patch KB5002908
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:13 PM
Data Sourced
via MITRE·05:13 PM
DescriptionSeverity
Data Sourced
via NVD·06:19 PM
DescriptionSeverityWeakness