CVE-2026-108452

HIGHCVSS 8.81% EPSS

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Published 2026-10-15 · last modified 2026-10-19

Affected products

VendorProduct
microsoftmicrosoft sharepoint server subscription edition
microsoftsharepoint_server

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.