Vulnerability Details CVE-2026-65660
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.082
EPSS Ranking 94.8%
CVSS Severity
CVSS v3 Score 8.8
Proposed Action
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-65660
-
cpe:2.3:a:microsoft:sharepoint_server:-
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.10417.20003
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20246
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20292
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20362
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20356
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20396
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20172
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20286
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20396
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20424
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20508
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20518
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20100
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20262
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20338
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20378
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20442
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20518
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20076
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20210
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20280
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20384
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20434
-
cpe:2.3:a:microsoft:sharepoint_server:2016
-
cpe:2.3:a:microsoft:sharepoint_server:2019