NetSight
high8.8

CVE-2026-69943

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove…

Impact

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftMicrosoft SharePoint Server Subscription Edition
from 16.0.0 before 16.0.20326.20190
MicrosoftSharepoint Server
before 16.0.20326.20190
Versions 2016, 2019

Weakness classification

References