CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-70298

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 64.7%

CVSS Severity

CVSS v3 Score 6.5

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298

Products affected by CVE-2026-70298

Microsoft » Sharepoint Server » Version: N/A

cpe:2.3:a:microsoft:sharepoint_server:-
Microsoft » Sharepoint Server » Version: 16.0.10417.20003

cpe:2.3:a:microsoft:sharepoint_server:16.0.10417.20003
Microsoft » Sharepoint Server » Version: 16.0.17328.20246

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20246
Microsoft » Sharepoint Server » Version: 16.0.17328.20292

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20292
Microsoft » Sharepoint Server » Version: 16.0.17328.20362

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20362
Microsoft » Sharepoint Server » Version: 16.0.17928.20356

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20356
Microsoft » Sharepoint Server » Version: 16.0.17928.20396

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20396
Microsoft » Sharepoint Server » Version: 16.0.18526.20172

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20172
Microsoft » Sharepoint Server » Version: 16.0.18526.20286

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20286
Microsoft » Sharepoint Server » Version: 16.0.18526.20396

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20396
Microsoft » Sharepoint Server » Version: 16.0.18526.20424

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20424
Microsoft » Sharepoint Server » Version: 16.0.18526.20508

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20508
Microsoft » Sharepoint Server » Version: 16.0.18526.20518

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20518
Microsoft » Sharepoint Server » Version: 16.0.19127.20100

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20100
Microsoft » Sharepoint Server » Version: 16.0.19127.20262

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20262
Microsoft » Sharepoint Server » Version: 16.0.19127.20338

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20338
Microsoft » Sharepoint Server » Version: 16.0.19127.20378

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20378
Microsoft » Sharepoint Server » Version: 16.0.19127.20442

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20442
Microsoft » Sharepoint Server » Version: 16.0.19127.20518

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20518
Microsoft » Sharepoint Server » Version: 16.0.19725.20076

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20076
Microsoft » Sharepoint Server » Version: 16.0.19725.20210

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20210
Microsoft » Sharepoint Server » Version: 16.0.19725.20280

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20280
Microsoft » Sharepoint Server » Version: 16.0.19725.20384

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20384
Microsoft » Sharepoint Server » Version: 16.0.19725.20434

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20434
Microsoft » Sharepoint Server » Version: 16.0.19725.20522

cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20522
Microsoft » Sharepoint Server » Version: 16.0.20326.20074

cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20074
Microsoft » Sharepoint Server » Version: 16.0.20326.20082

cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20082
Microsoft » Sharepoint Server » Version: 16.0.20326.20090

cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20090
Microsoft » Sharepoint Server » Version: 16.0.20326.20094

cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20094

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-70298

Products

Pricing

Contact Us