What is the CVSS score of CVE-2026-26105?

CVE-2026-26105 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Sharepoint Server are affected by CVE-2026-26105?

A high-severity cross-site scripting vulnerability in Microsoft SharePoint (CVE-2026-26105) enables attackers to impersonate users and manipulate content through spoofing attacks, potentially…. A patch is available.

How to fix or mitigate CVE-2026-26105?

Within 24 hours: Inventory all SharePoint instances and document exposure; disable or restrict external sharing if possible; notify security team to monitor for exploitation attempts. Within 7 days: Implement Web Application Firewall (WAF) rules to detect/block XSS payloads targeting SharePoint; restrict SharePoint access to internal networks only if operationally feasible; conduct user awareness training on phishing/spoofing risks. Within 30 days: Monitor Microsoft security advisories for patch release and prepare deployment testing environment; evaluate alternative collaboration platforms if patch timeline is unacceptable; perform comprehensive security audit of SharePoint configurations and access controls.

Sharepoint Server CVE-2026-26105

HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-03-10 secure@microsoft.com

Microsoft XSS Sharepoint Server

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 8.1

DescriptionCVE.org

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

AnalysisAI

Microsoft SharePoint Server contains a reflected cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts in users' browsers through malicious links, enabling spoofing attacks and credential theft. The vulnerability requires user interaction to trigger and affects all SharePoint deployments with no available patch. With a CVSS score of 8.1, this poses a significant risk to organizations relying on SharePoint for collaboration.

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.